Amazon Linux two provides the chance to install more application packages through the extras system. You need to use the available yum plugin to allow and disable Kernel Reside Patching. It is possible to then use the present workflows during the yum utility to apply security patches which includes kernel https://www.hostscheap.com/vestacp-install-service