how to patch windows ec2 instances in private subnets

0

Hi Team,

Regarding patch updates in private subnet, I came across one reference that seemed somewhat intricate. Are there simpler alternatives available for implementing patch updates?

https://aws.amazon.com/blogs/mt/how-to-patch-windows-ec2-instances-in-private-subnets-using-aws-systems-manager/

3 Respostas
0
Resposta aceita

The other option is to have a local wsus server in a subnet with a route to the internet either via a NAT gateway or public subnet if windows and local Linux repos which in turn they only have routes to the internet while internal servers connect to these and nothing else.

profile picture
ESPECIALISTA
respondido há 9 meses
profile picture
ESPECIALISTA
avaliado há um mês
0

Hello.
NAT Gateway is required for patching EC2 on private subnets.
Without a publicly accessible route, it is not possible to obtain updates from external repositories.

profile picture
ESPECIALISTA
respondido há 9 meses
profile picture
ESPECIALISTA
avaliado há um mês
  • The other option is to have a local wsus server if windows and local Linux repos which in turn they only have routes to the internet while internal servers connect to these and nothing else.

0

Thank you so much Riku and Gary for your immediate responses.

Let me try it out without NAT gateway as I am looking for reducing cost.

@Gary: Full context regarding this question: https://repost.aws/questions/QUyxuma6m6SO2laxH0GDBkOA/hosting-internal-application-on-aws

AWS
respondido há 9 meses
  • You could then in this case use an on prem WSUS/SCCM and if using red hat, a local satellite etc.

    I’m sure I’ve also seen default routes back to on prem and allow internet connectivity via on prem. Thus negating the need of a NAT Gateway.

Você não está conectado. Fazer login para postar uma resposta.

Uma boa resposta responde claramente à pergunta, dá feedback construtivo e incentiva o crescimento profissional de quem perguntou.

Diretrizes para responder a perguntas