AWS SSM Patch Manager

0

If I want to use the SSM patch manager to patch a Linux instance, should I use AWS-AmazonLinuxDefaultPatchBaseline or AWS-RunPatchBaseline? When does it use predefined baselines provided by Patch Manager?

已提问 10 个月前708 查看次数
2 回答
2
已接受的回答

From the document, I'm trying to make it clearer:

AWS-RunPatchBaseline is to apply patches for both operating systems and applications. (On Windows Server, application support is limited to updates for applications released by Microsoft.). This document supports Linux, macOS, and Windows Server managed nodes. The document will perform the appropriate actions for each platform. This SSM document performs patching operations on managed nodes for both security related and other types of updates. When the document is run, it uses the patch baseline specified as the "default" for an operating system type if no patch group is specified.

AWS-AmazonLinuxDefaultPatchBaseline approves all operating system patches that are classified as "Security" and that have a severity level of "Critical" or "Important". Also auto-approves all patches with a classification of "Bugfix". Patches are auto-approved 7 days after they are released or updated. It is only for Amazon Linux Operating system.

Conclusion: AWS-RunPatchBaseline works on Linux/Windows/Macos and perform patching operations for both security related and other types as well. If operating system is Amazon Linux, "Security" and OS patches that have a severity level of "Critical" or "Important", AWS-AmazonLinuxDefaultPatchBaseline will apply.

References:

AWS-RunPatchBaseline

AWS-AmazonLinuxDefaultPatchBaseline

profile pictureAWS
专家
已回答 10 个月前
profile picture
专家
已审核 10 个月前
profile picture
专家
已审核 10 个月前
0

Hi. AWS-RunPatchBaseline uses default baseline for OS you are using.So if you are using Amazon Linux, AWS-AmazonLinuxDefaultPatchBaseline will apply.

Patches are auto-approved 7 days after they are released or updated.¹

https://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-predefined-and-custom-patch-baselines.html

profile picture
专家
已回答 10 个月前
profile picture
专家
已审核 10 个月前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则