STEPS FOR WINDOWS PATCHING THROGH SSM
- Start the Instances
- Create 2 roles: (a) EC2 full access (b) SSM full access



- Go to portol.azure.com and then search for Enterprise Application.

- Search for Team CVoter and then go to user and group.

- Select the user and assign the role that you have created in step 1.
- Now in AWS console search for SSM.

- Now go to the Maintenance Windows Section and enable it from action menu.

- Select the windows ID and go to the targets. You can choose the particular instance manually, you want to update.

- Edit the Description Section to Schedule the Scan Process.

- Now give the name: cvotermw01, and in schedule section select the CRON/Rate Expression.

- Give the time in UTC (in cron expression) and give the 2 hours duration in maintenance windows duration.

- Save the Changes.
- Now go to the Task Section.

- Now select the Window task ID and edit it.

- In Parameter Section Choose the Scan Option and leave other as default

- Now run the edit run command task.
- After the Scanning process you can see the available patches or updates in view details -History section.
- Mail the client and give the information about the available patches.
- Have to follow the same procedure for the installation of the patches, Only you have to change the parameters action to install in Task section.

- In History you can see the status Change to SUCCESS from PENDING.

- Select the ID and View the details, Download the patches that has been installed and mail the client.
- Finally stop the Instances.