Azure Update Management(AUM)

Info

Currently it is only possible to use AUM with single subscription deployments. Environments with seperate general or management subscriptions will be added later

This sections will focus on managing azure update management for multple customer tenants. Using Azure DevOps pipelines together with Azure lighthouse, it is quite easy to deploy update config to multiple tenants.

Why use Azure Update Nanagement?

Azure update management is a native azure services to manage updates on multiple types of servers. It will work on both Windows Server and Linux VM's. Windows clients, like Windows 10 and 11, are officially not support but might work anyway.

Update management can be used to monitor the state of updates on devices, this gives you insights into what server needs updates or is already up to date. This data can also be used with KQL queries to create dashboard.

But that is not everything it does. You can also create update schedules that can automatically update VM's based on your configured settings. These schedules can either be assigned manually or dynamically using Dynamic scopes and tags. The latter option grants both the flexibility to assign schedules to specific servers and the automation of not having to assign it manually. Just set the correct tag at creation 'Which should be mandated using azure policy ofcource '.