Patching VM
Types of patching:
- os
- kernal update
- network packages
- dirvers
- operation files
- application
- package versions- java, python and its dependancy
Tools:
- wiztool
- veracode
Ex:
- we have two teams
- admin team –> manage infra and access
- project team –> create required servers and manage deployment application/apps
- key or password will have for access vms
AWS SSM
- role –> policy –> provide permissions – attached my VM (ec2 instance)
- ssm agent install
Azure RUN Command
- wwa agent
- RBAC –> user need access for RUN command

Create ec2 instance in aws
- gnerate key-pair and upload to aws keypairs
- import keypair to aws
- create ec2 instance with imported keypair
ssh -i <path of pemfile> username@ipaddress
sudo apt update # update all apt repo's
sudo apt list --upgradable
sudo apt install apache2 -y # install apache2
sudo systemctl status apache2.service # check status for application
sudo systemctl restart apache2.service
Systemctl cmds
sudo systemctl <stop/start/restart/enable> <servername>
Task:
- create linux (ec2 instance)
sudo apt update
sudo apt install nginx -y
sudo systemctl status nginx
sudo systemctl restart nginx.service
sudo systemctl enable nginx
sudo systemctl stop nginx
