Control: 3.1 Apply updates to any apps running in Lightsail
Description
Amazon Lightsail is a virtual private server (VPS) provider and is the easiest way to get started with AWS for developers, small businesses, students, and other users who need a solution to build and host their applications on cloud.
Lightsail offers a range of operating system and application templates that are automatically installed when you create a new Lightsail instance. Application templates include WordPress, Drupal, Joomla!, Ghost, Magento, Redmine, LAMP, Nginx (LEMP), MEAN, Node.js, Django, and more. You can install additional software on your instances by using the in-browser SSH or your own SSH client.
Remediation
To process and apply the latest updates for the application you are using is a manual process. Often dependent on the application itself and the operating system you are utilizing for the Lightsail instance.
From the Console:
- Login to AWS Console using https://console.aws.amazon.com.
- Click
All services
, clickLightsail
under Compute. - This will open up the Lightsail console.
- Select the
Instance
you want to update. - Make sure the instance status is running.
- Click on
Snapshots
. - Under
Manual snapshots
click on + Create snapshot. - Give it a name you will recognize.
- Click on
create
.
while in process it will show 'Snapshotting...'
- Once the date and time and snapshot name appears it is completed.
- Click on
Connect
. - Run the updates for the application discovered above in the Audit.
- Repeat steps no. 4 – 12 to apply any application updates required on the Lightsail instances that you are running.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.cis_compute_service_v100_3_1
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.cis_compute_service_v100_3_1 --share
SQL
This control uses a named query:
manual_control