In my workplace, we have a process of changing the EC2\'s AMI every month with the new patched private AMI.
Our internal operations team makes these patched AMI available