High
SSM
Regional
EC2 instances managed by Systems Manager should have a patch compliance status of COMPLIANT after a patch installation
PCI DSSNIST
Description
This control checks the compliance status of Systems Manager patch compliance on EC2 instances.
Remediation
To remediate non-compliant patches, install the required patches on your noncompliant instances using the AWS Systems Manager console.
Steps
- Open the AWS Systems Manager console.
- Choose Run Command, then choose Run command.
- Select AWS-RunPatchBaseline and change the Operation to Install.
- Choose the noncompliant instances and run the command.
- Monitor the new compliance status in the Compliance section.
Compliance
PCI DSSNIST