Windows-Vulnerability-Assessment-AWS-Lab
AWS Windows Server 2019 Security Assessment & Patch Remediation
The problem
This hands-on project documents a security configuration review and patch-remediation workflow on an Amazon EC2 instance running Windows Server 2019 Datacenter. I used Windows PowerShell to inspect the server's security posture, then AWS Systems Manager (SSM) Patch Manager to identify and remediate missing operating-system updates. Finally, I reviewed patch-compliance results to confirm the outcome.
What I did
Scope: This is a practical security-baseline and patch-management exercise, not a penetration test or a claim that the server has no vulnerabilities. Compliance results are specific to the AWS patch baseline and the time of the scan.
Result
Result: The initial AWS patch assessment identified two missing updates and a noncompliant managed instance. After a successful patch installation, the final Patch Manager dashboard reported 100% patch compliance, zero missing patches, zero failed patches, and zero nodes pending reboot under the configured patch baseline.