参考:用于修补操作的 Amazon S3 存储桶
在执行各种 Patch Manager 修补操作的过程中,AWS Systems Manager Agent(SSM Agent)访问 Amazon Web Services(AWS)拥有和维护的某些 Amazon Simple Storage Service(Amazon S3)存储桶。这些 S3 存储桶可以公开访问,默认情况下,SSM Agent 使用 HTTP
调用连接到这些存储桶。
但是,如果您正在 Systems Manager 操作中使用虚拟私有云(VPC)端点,则必须在 Systems Manager 的 Amazon Elastic Compute Cloud(Amazon EC2)实例配置文件中提供显式权限,或者在混合和多云环境中的非 EC2 计算机的服务角色中提供。否则,资源无法访问这些公有存储桶。
本参考主题列出了每个受支持 AWS 区域 的修补相关存储桶。
有关在 EC2 实例配置文件中指定这些 S3 存储桶的信息,请参阅 SSM Agent 与 AWS 托管 S3 存储桶进行通信。
有关将 VPC 端点与 Systems Manager 结合使用的信息,请参阅 使用适用于 Systems Manager 的 VPC 端点提高 EC2 实例的安全性。
包含用于修补操作的 SSM 命令文档的存储桶(Linux 和 Windows Server)
格式为 aws-patch-manager-
的存储桶包含在 Linux 和 Windows Server 操作系统上进行 Patch Manager 修补操作时使用的以下文档:region
-unique-suffix
-
AWS-RunPatchBaseline
-
AWS-RunPatchBaselineAssociation
-
AWS-RunPatchBaselineWithHooks
-
AWS-InstanceRebootWithHooks
-
AWS-PatchAsgInstance
-
AWS-PatchInstanceWithRollback
区域名称 | 区域代码 | aws-patch-manager- 存储桶 |
---|---|---|
美国东部(俄亥俄州) | us-east-2 | aws-patch-manager-us-east-2-552881074 |
美国东部(弗吉尼亚州北部) | us-east-1 | aws-patch-manager-us-east-1-1970c647d |
美国西部(加利福尼亚北部) | us-west-1 | aws-patch-manager-us-west-1-8badb4304 |
美国西部(俄勒冈州) | us-west-2 | aws-patch-manager-us-west-2-34d7f99f8 |
非洲(开普敦) | af-south-1 | aws-patch-manager-af-south-1-bdd5f65a9 |
亚太地区(香港) | ap-east-1 | aws-patch-manager-ap-east-1-632356271 |
亚太地区(海得拉巴) | ap-south-2 | aws-patch-manager-ap-south-2-32f4b4128 |
亚太地区(雅加达) | ap-southeast-3 | aws-patch-manager-ap-southeast-3-aa48fc462 |
亚太地区(墨尔本) | ap-southeast-4 | aws-patch-manager-ap-southeast-4-01e2c40d3 |
亚太地区(孟买) | ap-south-1 | aws-patch-manager-ap-south-1-cb7c62ff9 |
Asia Pacific (Osaka) | ap-northeast-3 | aws-patch-manager-ap-northeast-3-67373598a |
Asia Pacific (Seoul) | ap-northeast-2 | aws-patch-manager-ap-northeast-2-10467995c |
亚太地区(新加坡) | ap-southeast-1 | aws-patch-manager-ap-southeast-1-7fdfd9ef7 |
亚太地区(悉尼) | ap-southeast-2 | aws-patch-manager-ap-southeast-2-17283a275 |
Asia Pacific (Tokyo) | ap-northeast-1 | aws-patch-manager-ap-northeast-1-4849fa78f |
加拿大(中部) | ca-central-1 | aws-patch-manager-ca-central-1-3148e69e3 |
加拿大西部(卡尔加里) | ca-west-1 | aws-patch-manager-ca-west-1-9e3a4b2f9 |
欧洲(法兰克福) | eu-central-1 | aws-patch-manager-eu-central-1-9163fdaaf |
欧洲地区(爱尔兰) | eu-west-1 | aws-patch-manager-eu-west-1-5522fb710 |
欧洲(伦敦) | eu-west-2 | aws-patch-manager-eu-west-2-902a2bc74 |
欧洲(米兰) | eu-south-1 | aws-patch-manager-eu-south-1-c52f3f594 |
欧洲(巴黎) | eu-west-3 | aws-patch-manager-eu-west-3-29bf85721 |
欧洲(西班牙) | eu-south-2 | aws-patch-manager-eu-south-2-a4cf248b1 |
欧洲地区(斯德哥尔摩) | eu-north-1 | aws-patch-manager-eu-north-1-795879e9b |
欧洲(苏黎世) | eu-central-2 | aws-patch-manager-eu-central-2-184ce43c8 |
以色列(特拉维夫) | il-central-1 | aws-patch-manager-il-central-1-e221cb57b |
中东(巴林) | me-south-1 | aws-patch-manager-me-south-1-a53fc9dce |
中东(阿联酋) | me-central-1 | aws-patch-manager-me-central-1-2932f2f80 |
南美洲(圣保罗) | sa-east-1 | aws-patch-manager-sa-east-1-ddf4b6a09 |
包含用于修补操作的 SSM 命令文档的存储桶 (macOS)
格式为 aws-patchmanager-macos-
的存储桶包含在 macOS 操作系统上进行 Patch Manager 修补操作时使用的以下文档:region
-unique-suffix
-
AWS-RunPatchBaseline
-
AWS-RunPatchBaselineAssociation
-
AWS-RunPatchBaselineWithHooks
-
AWS-InstanceRebootWithHooks
-
AWS-PatchAsgInstance
-
AWS-PatchInstanceWithRollback
区域名称 | 区域代码 | aws-patchmanager-macos- 存储桶 |
---|---|---|
美国东部(俄亥俄州) | us-east-2 | aws-patchmanager-macos-us-east-2-552881074 |
美国东部(弗吉尼亚州北部) | us-east-1 | aws-patchmanager-macos-us-east-1-1970c647d |
美国西部(加利福尼亚北部) | us-west-1 | aws-patchmanager-macos-us-west-1-8badb4304 |
美国西部(俄勒冈州) | us-west-2 | aws-patchmanager-macos-us-west-2-34d7f99f8 |
非洲(开普敦) | af-south-1 | aws-patchmanager-macos-af-south-1-bdd5f65a9 |
亚太地区(香港) | ap-east-1 | aws-patchmanager-macos-ap-east-1-632356271 |
亚太地区(海得拉巴) | ap-south-2 | aws-patchmanager-macos-ap-south-2-32f4b4128 |
亚太地区(雅加达) | ap-southeast-3 | aws-patchmanager-macos-ap-southeast-3-aa48fc462 |
亚太地区(墨尔本) | ap-southeast-4 | aws-patchmanager-macos-ap-southeast-4-01e2c40d3 |
亚太地区(孟买) | ap-south-1 | aws-patchmanager-macos-ap-south-1-cb7c62ff9 |
Asia Pacific (Osaka) | ap-northeast-3 | aws-patchmanager-macos-ap-northeast-3-67373598a |
Asia Pacific (Seoul) | ap-northeast-2 | aws-patchmanager-macos-ap-northeast-2-10467995c |
亚太地区(新加坡) | ap-southeast-1 | aws-patchmanager-macos-ap-southeast-1-7fdfd9ef7 |
亚太地区(悉尼) | ap-southeast-2 | aws-patchmanager-macos-ap-southeast-2-17283a275 |
Asia Pacific (Tokyo) | ap-northeast-1 | aws-patchmanager-macos-ap-northeast-1-4849fa78f |
加拿大(中部) | ca-central-1 | aws-patchmanager-macos-ca-central-1-3148e69e3 |
加拿大西部(卡尔加里) | ca-west-1 | aws-patchmanager-macos-ca-west-1-9e3a4b2f9 |
欧洲(法兰克福) | eu-central-1 | aws-patchmanager-macos-eu-central-1-9163fdaaf |
欧洲地区(爱尔兰) | eu-west-1 | aws-patchmanager-macos-eu-west-1-5522fb710 |
欧洲(伦敦) | eu-west-2 | aws-patchmanager-macos-eu-west-2-902a2bc74 |
欧洲(米兰) | eu-south-1 | aws-patchmanager-macos-eu-south-1-c52f3f594 |
欧洲(巴黎) | eu-west-3 | aws-patchmanager-macos-eu-west-3-29bf85721 |
欧洲(西班牙) | eu-south-2 | aws-patchmanager-macos-eu-south-2-a4cf248b1 |
欧洲地区(斯德哥尔摩) | eu-north-1 | aws-patchmanager-macos-eu-north-1-795879e9b |
欧洲(苏黎世) | eu-central-2 | aws-patchmanager-macos-eu-central-2-184ce43c8 |
以色列(特拉维夫) | il-central-1 | aws-patchmanager-macos-il-central-1-e221cb57b |
中东(巴林) | me-south-1 | aws-patchmanager-macos-me-south-1-a53fc9dce |
中东(阿联酋) | me-central-1 | aws-patchmanager-macos-me-central-1-2932f2f80 |
南美洲(圣保罗) | sa-east-1 | aws-patchmanager-macos-sa-east-1-ddf4b6a09 |
包含 AWS 托管补丁基准快照的存储桶
格式为 patch-baseline-snapshot-
或 region
patch-baseline-snapshot-
的存储桶包含 AWS 托管补丁基准快照。如果您使用下列 SSM 文档,则必须具有此 S3 存储桶的访问权限:region
-unique-suffix
-
AWS-RunPatchBaseline
-
AWS-RunPatchBaselineAssociation
-
AWS-RunPatchBaselineWithHooks
-
AWS-ApplyPatchBaseline
(原有 SSM 文档)
区域名称 | 区域代码 | patch-baseline-snapshot-* 存储桶 |
---|---|---|
美国东部(俄亥俄州) | us-east-2 | patch-baseline-snapshot-us-east-2 |
美国东部(弗吉尼亚州北部) | us-east-1 | patch-baseline-snapshot-us-east-1 |
美国西部(加利福尼亚北部) | us-west-1 | patch-baseline-snapshot-us-west-1 |
美国西部(俄勒冈州) | us-west-2 | patch-baseline-snapshot-us-west-2 |
非洲(开普敦) | af-south-1 | patch-baseline-snapshot-af-south-1-tbxdb5b9 |
亚太地区(香港) | ap-east-1 | patch-baseline-snapshot-ap-east-1 |
亚太地区(海得拉巴) | ap-south-2 | patch-baseline-snapshot-ap-south-2-50209442 |
亚太地区(雅加达) | ap-southeast-3 | patch-baseline-snapshot-ap-southeast-3-be0a3174 |
亚太地区(墨尔本) | ap-southeast-4 | patch-baseline-snapshot-ap-southeast-4-dc6f76ce |
亚太地区(孟买) | ap-south-1 | patch-baseline-snapshot-ap-south-1 |
Asia Pacific (Osaka) | ap-northeast-3 | patch-baseline-snapshot-ap-northeast-3 |
Asia Pacific (Seoul) | ap-northeast-2 | patch-baseline-snapshot-ap-northeast-2 |
亚太地区(新加坡) | ap-southeast-1 | patch-baseline-snapshot-ap-southeast-1 |
亚太地区(悉尼) | ap-southeast-2 | patch-baseline-snapshot-ap-southeast-2 |
Asia Pacific (Tokyo) | ap-northeast-1 | patch-baseline-snapshot-ap-northeast-1 |
加拿大(中部) | ca-central-1 | patch-baseline-snapshot-ca-central-1 |
加拿大西部(卡尔加里) | ca-west-1 | patch-baseline-snapshot-ca-west-1 |
欧洲(法兰克福) | eu-central-1 | patch-baseline-snapshot-eu-central-1 |
欧洲地区(爱尔兰) | eu-west-1 | patch-baseline-snapshot-eu-west-1 |
欧洲(伦敦) | eu-west-2 | patch-baseline-snapshot-eu-west-2 |
欧洲(米兰) | eu-south-1 | patch-baseline-snapshot-eu-south-1 |
欧洲(巴黎) | eu-west-3 | patch-baseline-snapshot-eu-west-3 |
欧洲(西班牙) | eu-south-2 | patch-baseline-snapshot-eu-south-2-df2c9d70 |
欧洲地区(斯德哥尔摩) | eu-north-1 | patch-baseline-snapshot-eu-north-1 |
欧洲(苏黎世) | eu-central-2 | patch-baseline-snapshot-eu-central-2 |
以色列(特拉维夫) | il-central-1 | patch-baseline-snapshot-il-central-1 |
中东(巴林) | me-south-1 | patch-baseline-snapshot-me-south-1-uduvl7q8 |
中东(阿联酋) | me-central-1 | patch-baseline-snapshot-me-central-1 |
南美洲(圣保罗) | sa-east-1 | patch-baseline-snapshot-sa-east-1 |