I am automating the install of some software on Windows Server. As a pre-req, the OS should have the latest service pack and monthly update packs installed, or the apps won't be supported. The servers don't have internet access so no WU/MU. WSUS is not updated and outside my control. Need to figure out the latest updates for WS 2012, 2012R2 and 2016 and apply them - from a network repository. The servers are rebuilt on every release (every 2 weeks). Has to be scripted in Powershell and maintenance free - won't manually browse through the MU Catalog or other Microsoft resources to check on the latest and hard code the latest KB every month.
Need to build my own repository with the latest updates. Is there an official Microsoft list that can be queried (via Powershell if possible) and supports advanced searches for OS, date, type of update ? as listed here: https://www.catalog.update.microsoft.com/Home.aspx