Answers: <p>Your assumption is correct: you will not need to perform patching on an RDS instance, AWS handles that for you. There is a caveat, though: the majority of updates are not <em>forced</em> by AWS, but require an automated maintenance window to execute.</p>
  <blockquote>
  <p>Periodically, Amazon RDS performs maintenance on Amazon RDS resources. Maintenance most often involves updates to the DB instance's underlying hardware, underlying operating system (OS), or database engine version. Updates to the operating system most often occur for security issues and should be done as soon as possible.</p>
  </blockquote>
  <blockquote>
  <p>Some maintenance items require that Amazon RDS take your DB instance offline for a short time. Maintenance items that require a resource to be offline include required operating system or database patching. Required patching is automatically scheduled only for patches that are related to security and instance reliability. Such patching occurs infrequently (typically once every few months) and seldom requires more than a fraction of your maintenance window.</p>
  </blockquote>
  <p>Source: <a href="https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Maintenance.html" rel="nofollow noreferrer">Maintaining a DB Instance</a></p>
  <p>That document has a lot of useful information about the types of maintenance, the maintenance windows, and the manual actions you can take.</p>
  <p>Database engines need patching, too, and AWS refers to this as a minor engine upgrade. When necessary, these upgrades happen during the aforementioned maintenance windows, <strong>but</strong> you need to ensure your RDS instance has <strong>Auto Minor Version Upgrade</strong> enabled to take advantage of this feature.</p>
  <p>Source: <a href="https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Upgrading.html#USER_UpgradeDBInstance.Upgrading.AutoMinorVersionUpgrades" rel="nofollow noreferrer">Automatically Upgrading a Minor Engine Version</a></p>
  
Answers: CC BY-SA 4.0
Answers: 2021-01-21T17:06:19.637Z
Answers: 2021-01-21T17:06:19.637Z
Answers: Woodland
Body: <p>We are running databases in AWS RDS (MySQL Databases), EC2 instances etc. We keep the EC2 instances up-to-date with the latest AMI based on the latest security patches etc, we do this through terraforms.</p>
  <p>I assume that, AWS RDS being a managed service does not require the kind of updates that we are following for EC2. Please correct me if I am wrong and suggest the best practice.</p>
  
Tags: <amazon-rds>
Title: Keeping AWS RDS Instances up to date
UserDisplayName: Saravanan
ThreadText: # Keeping AWS RDS Instances up to date
  
  (Asked by: username_0 on 2021-01-21)
  
  We are running databases in AWS RDS (MySQL Databases), EC2 instances etc. We keep the EC2 instances up-to-date with the latest AMI based on the latest security patches etc, we do this through terraforms.
  
  I assume that, AWS RDS being a managed service does not require the kind of updates that we are following for EC2. Please correct me if I am wrong and suggest the best practice.
  
  **Tags:** amazon-rds
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2021-01-21. Score: 2 | Accepted answer
  
  Your assumption is correct: you will not need to perform patching on an RDS instance, AWS handles that for you. There is a caveat, though: the majority of updates are not *forced* by AWS, but require an automated maintenance window to execute.
  
  > Periodically, Amazon RDS performs maintenance on Amazon RDS resources. Maintenance most often involves updates to the DB instance's underlying hardware, underlying operating system (OS), or database engine version. Updates to the operating system most often occur for security issues and should be done as soon as possible.
  
  > Some maintenance items require that Amazon RDS take your DB instance offline for a short time. Maintenance items that require a resource to be offline include required operating system or database patching. Required patching is automatically scheduled only for patches that are related to security and instance reliability. Such patching occurs infrequently (typically once every few months) and seldom requires more than a fraction of your maintenance window.
  
  Source: [Maintaining a DB Instance](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Maintenance.html)
  
  That document has a lot of useful information about the types of maintenance, the maintenance windows, and the manual actions you can take.
  
  Database engines need patching, too, and AWS refers to this as a minor engine upgrade. When necessary, these upgrades happen during the aforementioned maintenance windows, **but** you need to ensure your RDS instance has **Auto Minor Version Upgrade** enabled to take advantage of this feature.
  
  Source: [Automatically Upgrading a Minor Engine Version](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Upgrading.html#USER_UpgradeDBInstance.Upgrading.AutoMinorVersionUpgrades)
  
  
  ---
  
  