With version 2 of the Elastic Beanstalk platform for Windows, managed platform updates are enabled in immutable update scenarios (https://aws.amazon.com/about-aws/whats-new/2019/02/aws-elastic-beanstalk-now-offers-windows-server-platform-v2-With-new-features/). I cannot seem to get confirmation on whether or not this replaces the need for SSM Patch manager to apply Windows updates, specifically security updates?
Can anyone confirm if the managed platform updates are sufficient to keep my Windows E2C instances secure? This post seems to be dated with the latest beanstalk updates: Does beanstalk automatically update and patch the windows image it uses? .