Please enable JavaScript.

Coggle requires JavaScript to display documents.

M2A IAM - Coggle Diagram

- - - - SSM Agent is preinstalled, by default, on the following Amazon Machine Images (AMIs):
      - Amazon Linux
      - Amazon Linux 2
      - Amazon Linux 2 ECS-Optimized AMIs
      - Ubuntu Server 16.04, 18.04, and 20.04
- - - - You can specify approved or rejected patches one by one.
      - To use a list of approved patches to install specific packages, you first remove all auto-approval rules. If you explicitly identify a patch as rejected, it will not be approved or installed, even if it matches all of the criteria in an auto-approval rule. Also, a patch is installed on an instance only if it applies to the software on the instance, even if the patch has otherwise been approved for the instance.
      - Patch Manager provides predefined patch baselines for each of the operating systems supported by Patch Manager. You can use these baselines as they are currently configured (you can't customize them) or you can create your own custom patch baselines. Custom patch baselines allows you greater control over which patches are approved or rejected for your environment. Also, the predefined baselines assign a compliance level of Unspecified to all patches installed using those baselines. For compliance values to be assigned, you can create a copy of a predefined baseline and specify the compliance values you want to assign to patches.
      - You can also create auto-approval rules to specify that certain types of updates (for example, critical updates) should be automatically approved. The rejected list overrides both the rules and the approve list.
- - - - Windows Registry: Registry key path, value name, value type, and value.
- - - - guardrail
        
        enabled per OU
      - can see ersources whether compliant or not