I am curious to know if we require separate update server in our cloud based PCI environment. In our current setup webserver, appserver, dbserver, logserver, and jump server are independent instance. I am not sure if we can directly update (packages) of these Centos Linux servers from yum or we need local update server(Spacewalk) which sync from outside software repos and then sync packages internally.