# Automatic updates

The installation in your AWS account installs security fixes and new versions by itself, unless you turn it off.

## How it works

- It installs only updates signed by Polarity, and checks the signature itself.
- It changes only its own container: the roles of your permission sets and the rest of the stack stay as they are.
- The parameter `AutomaticUpdates` of the stack `shonin-installation` turns it on or off. Its default is `yes`.

## Turn it off

In **Org settings**, panel **Updates**, choose **Turn off automatic updates**. Or update the stack with `AutomaticUpdates` set to `no`.

To turn them back on, an AWS administrator updates the CloudFormation stack `shonin-installation` with `AutomaticUpdates` set to `yes`.

## Outdated installation

If your installation runs an outdated version, the panel **Updates** says so:

- with automatic updates on, check that the service of the stack `shonin-installation` is running in Amazon ECS;
- with automatic updates off, update the CloudFormation stack `shonin-installation` with the latest template.