Table Of Contents

Feedback

User Guide

First time using the AWS CLI? See the User Guide for help getting started.

[ aws . ssm ]

list-compliance-items

Description

For a specified resource ID, this API action returns a list of compliance statuses for different resource types. Currently, you can only specify one resource ID per call. List results depend on the criteria specified in the filter.

See also: AWS API Documentation

Synopsis

  list-compliance-items
[--filters <value>]
[--resource-ids <value>]
[--resource-types <value>]
[--next-token <value>]
[--max-results <value>]
[--cli-input-json <value>]
[--generate-cli-skeleton <value>]

Options

--filters (list)

One or more compliance filters. Use a filter to return a more specific list of results.

Shorthand Syntax:

Key=string,Values=string,string,Type=string ...

JSON Syntax:

[
  {
    "Key": "string",
    "Values": ["string", ...],
    "Type": "EQUAL"|"NOT_EQUAL"|"BEGIN_WITH"|"LESS_THAN"|"GREATER_THAN"
  }
  ...
]

--resource-ids (list)

The ID for the resources from which to get compliance information. Currently, you can only specify one resource ID.

Syntax:

"string" "string" ...

--resource-types (list)

The type of resource from which to get compliance information. Currently, the only supported resource type is ManagedInstance .

Syntax:

"string" "string" ...

--next-token (string)

A token to start the list. Use this token to get the next set of results.

--max-results (integer)

The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.

--cli-input-json (string) Performs service operation based on the JSON string provided. The JSON string follows the format provided by --generate-cli-skeleton. If other arguments are provided on the command line, the CLI values will override the JSON-provided values.

--generate-cli-skeleton (string) Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value input, prints a sample input JSON that can be used as an argument for --cli-input-json. If provided with the value output, it validates the command inputs and returns a sample output JSON for that command.

Output

ComplianceItems -> (list)

A list of compliance information for the specified resource ID.

(structure)

Information about the compliance as defined by the resource type. For example, for a patch resource type, Items includes information about the PatchSeverity, Classification, etc.

ComplianceType -> (string)

The compliance type. For example, Association (for a State Manager association), Patch, or Custom:string are all valid compliance types.

ResourceType -> (string)

The type of resource. ManagedInstance is currently the only supported resource type.

ResourceId -> (string)

An ID for the resource. For a managed instance, this is the instance ID.

Id -> (string)

An ID for the compliance item. For example, if the compliance item is a Windows patch, the ID could be the number of the KB article. Here's an example: KB4010320.

Title -> (string)

A title for the compliance item. For example, if the compliance item is a Windows patch, the title could be the title of the KB article for the patch. Here's an example: Security Update for Active Directory Federation Services.

Status -> (string)

The status of the compliance item. An item is either COMPLIANT or NON_COMPLIANT.

Severity -> (string)

The severity of the compliance status. Severity can be one of the following: Critical, High, Medium, Low, Informational, Unspecified.

ExecutionSummary -> (structure)

A summary for the compliance item. The summary includes an execution ID, the execution type (for example, command), and the execution time.

ExecutionTime -> (timestamp)

The time the execution ran as a datetime object that is saved in the following format: yyyy-MM-dd'T'HH:mm:ss'Z'.

ExecutionId -> (string)

An ID created by the system when put-compliance-items was called. For example, CommandID is a valid execution ID. You can use this ID in subsequent calls.

ExecutionType -> (string)

The type of execution. For example, Command is a valid execution type.

Details -> (map)

A "Key": "Value" tag combination for the compliance item.

key -> (string)

value -> (string)

NextToken -> (string)

The token for the next set of items to return. Use this token to get the next set of results.