Guest updates

Updates to VM are the responsibility of administrator. Azure is not responsible for patching guest VMs. Guest updates are in preview mode and users should control patching manually or using custom automation such as runbooks and scripts. However, rolling patch upgrades are in preview mode and can be configured in the ARM template using the upgrade policy, as shown here:

"upgradePolicy": {
"mode": "Rolling",
"automaticOSUpgrade": "true" or "false",
  "rollingUpgradePolicy": {
    "batchInstancePercent": 20,
    "maxUnhealthyUpgradedInstanceCount": 0,
    "pauseTimeBetweenBatches": "PT0S"
  }
}