New patching solutions are coming to the Center for Medicare and Medicaid Services (CMS) Hybrid Cloud Amazon Web Services (AWS) environment. Post-Patching Automation is an extension of enterprise cloud patching and introduces a Systems Management (SSM) Document that will execute commands and scripts provided by the customer to perform actions on each server once patching of the server is complete. This operation will be incorporated into existing patching infrastructure as part of the maintenance window and will run a task once patching of the server is complete. The SSM Document can be deployed to every account, allowing each Application Development Owner (ADO) or application team to go in and choose whether to use that document or patching service.
Post-Patching Automation uses Amazon’s System Manager as the core engine to run the script using a SSM Document. ADOs must be subscribed to SSM Patching Services in the CMS Hybrid Cloud AWS environment for the script to run. To subscribe to Hybrid Cloud Patching Services and take advantage of Post-Patching Automation, please contact your Hosting Coordinator.
New Post-Patching Automation features will be available Thursday, January 23, 2025. Participants need to be signed up for SSM patching services to use this feature.
Background and Timeline
Post-Patching Automation will be available Thursday, January 23, 2025.
Action Required
- If you are not already subscribed to CMS Hybrid Cloud Patching Services and want to be enrolled, work directly with your Hosting Coordinator to subscribe.
- To enable Post-Patching Automation, follow the steps to fill out a Post Patching Automation Document listed on cloud.cms.gov.
- Patching tags continue to be mandatory for all users. “No Patch” tags are acceptable.
Questions or Issues
For issues or questions about this initiative, please work directly with your Hosting Coordinator.
