Amazon Linux AMIs download and install any critical or important security updates at launch time. this is why you see that message saying that some security updates are available.
Although, security updates can also be applied after the instance is running, using the following command:
yum update --security