An Azure service that is used to provision Windows and Linux virtual machines.
If you choose a MS provided OS image, upgrades would be automatically performed.
If you choose any third party image from marketplace, it'd be your responsibility, where you can use security groups in conjunction with a jump box to manually download and install upgrades.