Patching Virtual Machines (Azure & AWS)
- OS
- Application packages
Scenario
Imagine your company has two teams:
| Team | Role |
|---|---|
| Admin Team (Us) | Creates cloud infrastructure — VMs, networks, storage |
| Project Team | Developers who use the VMs to deploy their applications |
Problem:
- Project team holds login cridentals of thier vm
- Admin team does not have ssh password or keys
- Admin team responsible for keeping VM patching and secure
- Azure – VM patching without SSH a. Console (https open broswer) b. Run Command (Agent will our scrpits) WAagent (windows Azure linux agent)
- (waagent)
- AWS – VM patching without SSH
a. Ec2 connect ==> open broswer connect vm b. AWS system manager (need agent) * enable ssm role * SSM agent (we need install ssm agent) * (SSM)
Update default packages
redhat/amazon linux
- dnf ==> package manager (Dandified yum)
- yum ==> Old package manager (yellowdog updater,modified) RPM
sudo dnf update -y
ubuntu/debian packages
apt: application packing tool
sudo apt update && sudo apt upgrade -y
windows
- choco
- winget
- Manually download & install
Exercise:
- create redhat/centos vm/ec2 machine run below cmds
sudo yum update -y && sudo yum install httpd -y
