Following the recent heartbleed vulnerability of OpenSSL, I would like to keep my EC2 machines updated on a regular basis. The naive approach would be setting an hourly cron job for security updates (
sudo apt-get update && sudo unattended-upgrade).
Are there any risks of doing that? Is there a recommended update mechanism for EC2 machines?