diff --git a/README.md b/README.md
index f531bf1..c2889a9 100644
--- a/README.md
+++ b/README.md
@@ -59,6 +59,7 @@ No modules.
 |------|-------------|------|---------|:--------:|
 | <a name="input_admin_ssh_key"></a> [admin\_ssh\_key](#input\_admin\_ssh\_key) | Objects to configure ssh key reference for Virtual Machine Scale Sets | <pre>object({<br>    username   = optional(string, "azureuser")<br>    public_key = string<br>  })</pre> | <pre>{<br>  "public_key": null,<br>  "username": null<br>}</pre> | no |
 | <a name="input_analytics_workspace_id"></a> [analytics\_workspace\_id](#input\_analytics\_workspace\_id) | Resource ID of Log Analytics Workspace | `string` | `null` | no |
+| <a name="input_automatic_os_upgrade_policy"></a> [automatic\_os\_upgrade\_policy](#input\_automatic\_os\_upgrade\_policy) | Configuration options for automatic os upgrade policy | <pre>object({<br>    disable_automatic_rollback  = optional(bool, false)<br>    enable_automatic_os_upgrade = optional(bool, false)<br>  })</pre> | `{}` | no |
 | <a name="input_data_collection_rule_association_name"></a> [data\_collection\_rule\_association\_name](#input\_data\_collection\_rule\_association\_name) | Data collection rule association name | `string` | `null` | no |
 | <a name="input_data_collection_rule_name"></a> [data\_collection\_rule\_name](#input\_data\_collection\_rule\_name) | Data collection rule name | `string` | `null` | no |
 | <a name="input_datasource_name"></a> [datasource\_name](#input\_datasource\_name) | Datasource syslog name | `string` | `"datasource-syslog"` | no |
diff --git a/main.tf b/main.tf
index e13c893..31aa798 100644
--- a/main.tf
+++ b/main.tf
@@ -46,6 +46,11 @@ resource "azurerm_linux_virtual_machine_scale_set" "this" {
     }
   }
 
+  automatic_os_upgrade_policy {
+    disable_automatic_rollback  = var.automatic_os_upgrade_policy.disable_automatic_rollback
+    enable_automatic_os_upgrade = var.automatic_os_upgrade_policy.enable_automatic_os_upgrade
+  }
+
   boot_diagnostics {
     storage_account_uri = null
   }
diff --git a/variables.tf b/variables.tf
index 833dfc9..745e1ea 100644
--- a/variables.tf
+++ b/variables.tf
@@ -176,3 +176,12 @@ variable "dependency_agent_extension_version" {
   description = "Version of VMSS extension required for logging"
   default     = "9.5"
 }
+
+variable "automatic_os_upgrade_policy" {
+  description = "Configuration options for automatic os upgrade policy"
+  type = object({
+    disable_automatic_rollback  = optional(bool, false)
+    enable_automatic_os_upgrade = optional(bool, false)
+  })
+  default = {}
+}