The default setting for repo_upgrade is security. That's, if you do not specify a unique value in the person data, by default, Amazon Linux performs the security upgrades at launch for virtually any deals installed At the moment. This is simply not necessary In such cases as it is CloudFlare https://socialicus.com/story2189299/detailed-notes-on-aws-linux-support