SSM.2

EC2 instances managed by Systems Manager should have a patch compliance status of COMPLIANT after a patch installation

Severity

Cloud Platforms

Resources

Related Standards

Automated

HIGH

AWS

AWS Systems Manager

AWS Foundational Best Practice, AWS Well-Architected, PCI DSS v3.2.1, CDR, ISO27001, SOC2, NIST CSF, NIST.800-53.r5,

This AWS control checks whether the compliance status of the Amazon EC2 Systems Manager patch compliance is COMPLIANT or NON_COMPLIANT after the patch installation on the instance. It only checks instances that are managed by AWS Systems Manager Patch Manager.