How can we do patch compliance reporting for Patching using SSM AWS-PatchAsgInstance document in Patch manager solution.
How can we do patch compliance reporting LIKE storing the reports to S3 bucket for Patching using SSM AWS-PatchAsgInstance document. Could you please help me the approach.
We do have compliance reporting in AWS-PatchInstanceWithRollback in SSM document, SO looking for similar approach in ASG Patch group patching. { "name": "SaveComplianceReportToS3", "action": "aws:invokeLambdaFunction", "inputs": { "FunctionName": "SaveRptToS3Lambda-{{automation:EXECUTION_ID}}", "Payload": "{"S3Bucket": "{{ReportS3Bucket}}", "CheckCompliance": {{CheckCompliance.Payload}}}" }
- Topics
- Management & Governance
- Language
- English
asked 3 years ago644 views
- Newest
- Most votes
- Most comments
The AWS-PatchAsgInstance document currently does not support compliance reporting. In order to achieve this, I think you will need to create a custom runbook off the AWS-PatchAsgInstance document and add custom steps to achieve the complicance reporting.
answered 3 years ago
Relevant content
asked 3 years ago
