SSM.2

EC2 instances managed by Systems Manager should have a patch compliance status of COMPLIANT after a patch installation

Severity

Cloud Platforms

Resources

HIGH

AWS

AWS Systems Manager

This AWS control checks whether the compliance status of the Amazon EC2 Systems Manager patch compliance is COMPLIANT or NON_COMPLIANT after the patch installation on the instance. It only checks instances that are managed by AWS Systems Manager Patch Manager.