Recently I found that my AWS EC2 instance performance degrades after applying windows updates. The reason is that I created the new AMI right away after Windows Update complete.
Now each time new instance started, I have the high CPU usage due to the .NET Runtime Optimization Services.
The best practice here is to wait till this service done its job. In my environment it takes up to 30 minutes!