Is it really true that there's no cost associated with AWS patching using the Patch Manager? I read that Lambda and the automation processes linked to AWS patching might add some expenses. For reference, I know Azure's Update Manager charges around $5 per instance for patching. Has anyone done a cost comparison between the patching methods of Azure and AWS?
2 Answers
Yes, that's accurate! Using the SSM Patch Manager from AWS incurs no extra costs. While Lambda does have charges for each invocation, they're minimal when it comes to patching. Also, EventBridge fees are pretty negligible too.
I agree! The real hurdle is understanding the complexities AWS might have with its patching process.
You're absolutely right. There aren't any additional Lambda or automation costs with AWS SSM Patch Manager. Essentially, it's just a scheduling tool that lets you define a patch baseline and set a maintenance window for applying those patches. It runs scripts on your managed instances to download patches and trigger updates from official sources, whether for Windows or Linux. The AWS pricing pages are pretty straightforward about this—SSM is a great service and often free! You can find more details on their pricing page.
Thanks for breaking that down! I did hear there are some limitations with Patch Manager, like needing to apply patches across organizations rather than specific accounts, which can complicate things. Also, it feels challenging to automate the entire Patch Manager process using Terraform.
Thanks for confirming! That's pretty awesome to hear.