AWS dms documentation change
Summary
Added documentation for AWS Systems Patch Manager integration with DMS diagnostic instances
Security assessment
The change adds documentation about automated security patching through Systems Manager, which is a security best practice. However, it does not address a specific known vulnerability.
Diff
diff --git a/dms/latest/userguide/CHAP_SupportAmi.md b/dms/latest/userguide/CHAP_SupportAmi.md index 0f13e0ec1..53d0feef9 100644 --- a//dms/latest/userguide/CHAP_SupportAmi.md +++ b//dms/latest/userguide/CHAP_SupportAmi.md @@ -5 +5 @@ -Launch a new AWS DMS diagnostic Amazon EC2 instanceCreate an IAM roleRun Diagnostic TestsNext StepsAMI IDs by region +Launch a new AWS DMS diagnostic Amazon EC2 instanceCreate an IAM roleRun Diagnostic TestsNext StepsAMI IDs by regionAWS Systems Patch Manager @@ -35,0 +36,2 @@ The diagnostic tests installed on the Amazon machine image (AMI) include the fol + * AWS Systems Patch Manager + @@ -183,0 +186,21 @@ If the output shows no results, it means the DMS Diagnostic AMI is not available +## AWS Systems Patch Manager + +AWS Systems Patch Manager automates patching for operating systems and applications on your EC2 instances. + +###### To configure the patch manager, perform the following steps: + + 1. Enable Systems Manager: + + 1. Attach the `AmazonSSMManagedInstanceCore` IAM policy to your EC2 instance role. + + 2. Ensure SSM Agent is installed (default for Amazon Linux 2, Ubuntu 20.04+ AMIs). + + 2. Create a patch baseline by defining rules for critical/security updates, including schedules for patch application. + + 3. Schedule updates for applying patches at a defined time by using maintenance windows in SSM. + + 4. Verify compliance by checking patching status and compliance reports in the Systems Manager. + + + +