new ami: latest security patches and enable additional package repository by default