What is the best practice for maintaining Windows EC2 instances and applying updates?
Create a maintenance schedule that an employee must fill out each week confirming a visual inspection of each instance was conducted and which patches were applied.
Use AWS Systems Manager Patch Manager to find an patch instances that require updates during a set maintenance window.
Turn on auto update in Windows Update on each EC2 that is launched, or create your own AMI with this feature enabled and launch all of your EC2 instances from this AMI.
Install Window Server Update Services on your primary Active Directory controller.