Windows Server Update Services (WSUS) is a server role included with Windows Server at no additional cost. It can perform the following functions:

• Download required updates and patches from the internet and act as an internally managed proxy server.
• Manage clients, including other Windows servers, by defining policies that approve or decline updates and patches, and report compliance status of clients.

Amazon Web Services (AWS) customers can deploy WSUS as a centralized Microsoft update repository.

This solution deploys a WSUS endpoint for downloading updates. Client and policy management can be performed by AWS Systems Manager or by the traditional WSUS console with Microsoft Active Directory Group Policy.

This solution is for system administrators and IT engineers who need to use WSUS as the endpoint where Windows servers and other Microsoft applications are authorized to acquire updates.

https://aws.amazon.com/solutions/implementations/windows-server-update-services/