Apply updates that Amazon marks as bug fixes. Bug fixes are a bigger set of updates, which involve stability updates and fixes for numerous other minor bugs. You can utilize the readily available yum plugin to allow and disable Kernel Stay Patching. You could then use the existing workflows from https://www.hostscheap.com/apache-ssl-certificate-install-service