EC2 Patch Compliance Review

Ensures that all EC2 instances are associated with an SSM patch schedule for compliance. A report is run to identify non-compliant instances, and if found, they are automatically added to the SSM patch schedule.

1. Run SSM Patch Compliance Report for EC2

  • Review all EC2 instances and determine if they are associated with an SSM patch schedule for compliance.

2. Evaluate EC2 Patch Compliance Report

  • If all EC2 instances are associated with an SSM patch schedule, return 'none'. If there are EC2 instances missing the patch schedule, return 'add'.

3. Add Non-Compliant EC2 Instances to SSM Patch Schedule

  • For each EC2 instance missing an SSM patch schedule, add it to the SSM patch compliance schedule automatically.
Workflow Ready

EC2 Patch Compliance Review

Start
Manual
Run SSM Patch Compliance Report for EC2
Blueprint: report_ssm_patch_com...
Evaluate EC2 Patch Compliance Report
Add Non-Compliant EC2 Instances to SSM Patch Schedule
Blueprint: cloudtask_add_ec2_pa...
End
End (No Action)