5 ms·
For those few AMI's that are long lived, AWS SSM Patch Manager is your friend. Naturally take care to roll out patches in a rolling block, you don't want to app
by LilBytes 5y ago
For those few AMI's that are long lived, AWS SSM Patch Manager is your friend. Naturally take care to roll out patches in a rolling block, you don't want to apply a broken patch everywhere in the same day :)
https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-patch.html https://docs.aws.amazon.com/systems-manager/latest/userguide...
- belval 5y agoI second this, we use it to manage a bigger fleet with a few hundred machines. One thing to keep in mind though is that it will not apply kernel updates (as those require a reboot) so you still need to account for it.
- podc 5y agoHow do you apply kernel updates? Since rebooting anyway do you just throw the ec2 instance away at this point and launch a new one with latest image (and thus kernel updates)?
- mcbain 5y agoI haven’t tried this yet (our instances need other changes to get to this point) but AL2 can support live kernel patching: https://docs.aws.amazon.com/systems-manager/latest/userguide/kernel-live-patching.html https://docs.aws.amazon.com/systems-manager/latest/userguide...