Why doesn't an Ubuntu patch baseline allow auto-approval delay?

userbSX 0
Viewed 19

I noticed that among the default patch baselines that AWS provides for Systems Manager (SSM) Patch Manager, the Ubuntu patch baseline doesn't seem to support an auto-approval delay. Most of the other operating system patch baselines have an auto-approval delay such as

enter image description here

I even tried creating my own Ubuntu patch baseline in a CloudFormation template where I specified ApproveAfterDays

enter image description here

CloudFormation created it without error, but there is no Auto approval delay on the new baseline.

Why not?

aws-ssm amazon-web-services
1 Answers

After searching for an explanation, I found this tidbit in a documentation page:

There is no wait before approval because reliable release dates aren't available in the repositories.

The same applies to a couple other operating systems as well. So it seems CloudFormation just ignores the setting for some operating systems.

userbSX0
Related