The lab will be set up in ap-southeast-2 (Sydney).
In the process of building a security strategy, OS Patching is an indispensable activity to ensure that EC2 instances running critical applications always use an operating system with the latest security patches, which will minimize the risk of security vulnerabilities and the attack surface.
The majority of security standards worldwide at least require evidence of the system updating and patching process because this is a daily and mandatory activity. On the other hand, for enterprises with a large number of resources, managers must be careful to avoid potential risks that could arise due to Operational Overhead and ensure that downtime is always minimal.
Therefore, an Automated Patching Solution is highly necessary; besides helping to reduce Operational Overhead, it also creates readiness for future Audits activities.
There are quite a few approaches to automate the OS Patching task through the combination of AWS services.
A typical one among them is utilizing the Blue/Green Deployment method to build a new Amazon Machine Image (AMI) containing the latest patches, then this AMI will be fully ready to be used for EC2 instances running applications. To easily visualize, the following processes will be performed:
Upon completing this lab, you will be charged for resources that are not covered under the AWS Free Tier. The most significant costs are NAT Gateway and the EBS Snapshot of the AMIs created by Image Builder.