Select Language:
If you are using AWS Systems Manager Patch Manager to update your Windows instances and select the “Patch Now” option, it runs a command called “AWS-RunPatchBaseline.” This command uses a predefined set of rules called the “AWS-WindowsPredefinedPatchBaseline-OS-Applications” to determine which updates to apply.
But what exactly happens during this process? The logs don’t give a full explanation. Essentially, this operation scans your Windows machine for available updates based on the patch baseline, which specifies the types of patches to install—such as security updates, critical patches, or application patches. Then, it automatically downloads and installs these patches to keep your system up to date.
To understand what patches will be applied before running the update, you can manually review the patch baseline details in AWS Systems Manager. This way, you get a better idea of the specific updates that will be installed on your Windows instance.
In short, using “Patch Now” with this command helps keep your Windows servers secure and current by automatically applying the latest necessary updates based on a predefined set of rules.



