{"id":392730,"date":"2024-11-05T08:53:34","date_gmt":"2024-11-05T08:53:34","guid":{"rendered":"https:\/\/innovationspace.ansys.com\/forum\/forums\/topic\/how-to-manage-machine-updates-aws-systems-manager\/"},"modified":"2024-11-05T08:55:28","modified_gmt":"2024-11-05T08:55:28","slug":"how-to-manage-machine-updates-aws-systems-manager","status":"answered","type":"topic","link":"https:\/\/innovationspace.ansys.com\/forum\/forums\/topic\/how-to-manage-machine-updates-aws-systems-manager\/","title":{"rendered":"How to manage machine updates [AWS Systems Manager]"},"content":{"rendered":"<p>&lt;p&gt;&lt;p class=&#8221;MsoNormal&#8221;&gt;This post will help you to onboard Ansys Gateway machines to <a href=\"https:\/\/docs.aws.amazon.com\/systems-manager\/\">AWS Systems Manager<\/a>.&nbsp;&lt;\/p&gt;&lt;p class=&#8221;MsoNormal&#8221;&gt;AWS Systems manager provides <a href=\"https:\/\/docs.aws.amazon.com\/systems-manager\/latest\/userguide\/patch-manager.html\">Patch Manager<\/a>, which automates the process of patching managed nodes with both security-related updates and other types of updates.&lt;\/p&gt;&lt;p class=&#8221;MsoNormal&#8221;&gt;AWS provides an extensive user <a href=\"https:\/\/docs.aws.amazon.com\/systems-manager\/latest\/userguide\/what-is-systems-manager.html\">guide<\/a> for setup. You can also start with <a href=\"https:\/\/docs.aws.amazon.com\/systems-manager\/latest\/userguide\/systems-manager-quick-setup.html\">Quick Setup<\/a> to quickly configure with recommended best practices.&lt;\/p&gt;&lt;p class=&#8221;MsoNormal&#8221;&gt;<strong>Prerequisites<\/strong>&lt;\/p&gt;&lt;\/p&gt;<\/p>\n<ul>\n<li>&lt;!&#8211; [if !supportLists]&#8211;&gt;Configure Permissions<\/li>\n<\/ul>\n<p>&lt;p&gt;&lt;p style=&#8221;padding-left: 40px;&#8221;&gt;By default, AWS Systems Manager doesn&#8217;t have permission to perform actions on your instances. You can provide instance permissions at the account level using an AWS Identity and Access Management (IAM) role, or at the instance level using an instance profile&lt;\/p&gt;&lt;p style=&#8221;padding-left: 40px;&#8221;&gt;<a href=\"\/docs.aws.amazon.com\/systems-manager\/latest\/userguide\/setup-instance-permissions.html#default-host-management\">Recommended configuration for EC2 instance permissions<\/a>&lt;\/p&gt;&lt;\/p&gt;<\/p>\n<ul>\n<li>&lt;!&#8211; [if !supportLists]&#8211;&gt;Install AWS Systems Manager Agent (SSM Agent)&lt;br&gt;&lt;br&gt;SSM Agent makes it possible for Systems Manager to update, manage, and configure resources.&lt;br&gt;&lt;br&gt;SSM Agent is preinstalled&nbsp;on Ansys Gateway <strong>Windows<\/strong> image.&lt;br&gt;&lt;br&gt;For <strong>Linux<\/strong> machines please follow the setup guide here (<a href=\"https:\/\/docs.aws.amazon.com\/systems-manager\/latest\/userguide\/agent-install-centos-7.html#quick-install-centos-7\">Install SSM Agent on CentOS 7.x &#8211; AWS Systems Manager<\/a>) This has to be done after the successful deployment of the machine through Ansys Gateway, which uses CentOS 7 (x86_64) from OpenLogic by Perforce.<\/li>\n<\/ul>\n<p>&lt;p&gt;&lt;p class=&#8221;MsoListParagraphCxSpMiddle&#8221; style=&#8221;margin-left: 54.0pt; mso-add-space: auto; text-indent: -18.0pt; mso-list: l0 level1 lfo2;&#8221;&gt;&lt;!&#8211; [if !supportLists]&#8211;&gt;&lt;span style=&#8221;mso-bidi-font-family: Aptos; mso-bidi-theme-font: minor-latin;&#8221;&gt;&lt;span style=&#8221;mso-list: Ignore;&#8221;&gt;1.&lt;span style=&#8221;font: 7.0pt &#8216;Times New Roman&#8217;;&#8221;&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;\/span&gt;&lt;\/span&gt;&lt;\/span&gt;&lt;!&#8211;[endif]&#8211;&gt;Login to the machine&lt;\/p&gt;&lt;p class=&#8221;MsoListParagraphCxSpMiddle&#8221; style=&#8221;margin-left: 54.0pt; mso-add-space: auto; text-indent: -18.0pt; mso-list: l0 level1 lfo2;&#8221;&gt;&lt;!&#8211; [if !supportLists]&#8211;&gt;&lt;span style=&#8221;mso-bidi-font-family: Aptos; mso-bidi-theme-font: minor-latin;&#8221;&gt;&lt;span style=&#8221;mso-list: Ignore;&#8221;&gt;2.&lt;span style=&#8221;font: 7.0pt &#8216;Times New Roman&#8217;;&#8221;&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;\/span&gt;&lt;\/span&gt;&lt;\/span&gt;&lt;!&#8211;[endif]&#8211;&gt;Run the following command to the terminal window&lt;br&gt;&lt;br&gt;sudo yum install -y <a href=\"https:\/\/s3.amazonaws.com\/ec2-downloads-windows\/SSMAgent\/latest\/linux_amd64\/amazon-ssm-agent.rpm\">https:\/\/s3.amazonaws.com\/ec2-downloads-windows\/SSMAgent\/latest\/linux_amd64\/amazon-ssm-agent.rpm<\/a>&lt;\/p&gt;&lt;p class=&#8221;MsoListParagraphCxSpMiddle&#8221; style=&#8221;margin-left: 54.0pt; mso-add-space: auto;&#8221;&gt;&nbsp;&lt;\/p&gt;&lt;p class=&#8221;MsoListParagraphCxSpMiddle&#8221; style=&#8221;margin-left: 54.0pt; mso-add-space: auto; text-indent: -18.0pt; mso-list: l0 level1 lfo2;&#8221;&gt;&lt;!&#8211; [if !supportLists]&#8211;&gt;&lt;span style=&#8221;mso-bidi-font-family: Aptos; mso-bidi-theme-font: minor-latin;&#8221;&gt;&lt;span style=&#8221;mso-list: Ignore;&#8221;&gt;3.&lt;span style=&#8221;font: 7.0pt &#8216;Times New Roman&#8217;;&#8221;&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;\/span&gt;&lt;\/span&gt;&lt;\/span&gt;&lt;!&#8211;[endif]&#8211;&gt;Verify installation status, which reports reports that the agent is running&lt;br&gt;&lt;br&gt;sudo systemctl status amazon-ssm-agent&lt;\/p&gt;&lt;p class=&#8221;MsoNormal&#8221;&gt;After the setup is completed, you can now&nbsp;perform management tasks with Systems Manager. &lt;br&gt;AWS Systems Manager console is available at&nbsp;<a href=\"https:\/\/console.aws.amazon.com\/systems-manager\/\" target=\"_blank\" rel=\"noopener\">https:\/\/console.aws.amazon.com\/systems-manager\/<\/a>.&lt;br&gt;To get started with Patch Manager, in the navigation pane, choose <strong>Patch Manager.<\/strong>&lt;\/p&gt;&lt;\/p&gt;<\/p>\n","protected":false},"template":"","class_list":["post-392730","topic","type-topic","status-answered","hentry"],"aioseo_notices":[],"acf":[],"custom_fields":[{"0":{"_bbp_status":["closed"],"_bbp_author_ip":["62.1.98.162"],"_btv_view_count":["650"],"_bbp_topic_status":["answered"],"_edit_last":["20790"],"_bbp_revision_log":["a:1:{i:392733;a:2:{s:6:\"author\";i:20790;s:6:\"reason\";s:0:\"\";}}"],"_bbp_topic_id":["392730"],"_bbp_forum_id":["233598"],"_bbp_last_reply_id":["0"],"_bbp_last_active_id":["392730"],"_bbp_last_active_time":["2024-11-05 08:53:34"]},"test":"nikos-nikoloutsakosansys-com"}],"_links":{"self":[{"href":"https:\/\/innovationspace.ansys.com\/forum\/wp-json\/wp\/v2\/topics\/392730","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/innovationspace.ansys.com\/forum\/wp-json\/wp\/v2\/topics"}],"about":[{"href":"https:\/\/innovationspace.ansys.com\/forum\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":2,"href":"https:\/\/innovationspace.ansys.com\/forum\/wp-json\/wp\/v2\/topics\/392730\/revisions"}],"predecessor-version":[{"id":392733,"href":"https:\/\/innovationspace.ansys.com\/forum\/wp-json\/wp\/v2\/topics\/392730\/revisions\/392733"}],"wp:attachment":[{"href":"https:\/\/innovationspace.ansys.com\/forum\/wp-json\/wp\/v2\/media?parent=392730"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}