Interface ICfnPatchBaselineProps

Properties for defining a CfnPatchBaseline.

Namespace: Amazon.CDK.AWS.SSM

Assembly: Amazon.CDK.Lib.dll

Syntax (csharp)

public interface ICfnPatchBaselineProps

Syntax (vb)

Public Interface ICfnPatchBaselineProps

Remarks

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html

ExampleMetadata: fixture=_generated

Examples

// The code below shows an example of how to instantiate this type.
             // The values are placeholders you should change.
             using Amazon.CDK.AWS.SSM;

             var cfnPatchBaselineProps = new CfnPatchBaselineProps {
                 Name = "name",

                 // the properties below are optional
                 ApprovalRules = new RuleGroupProperty {
                     PatchRules = new [] { new RuleProperty {
                         ApproveAfterDays = 123,
                         ApproveUntilDate = "approveUntilDate",
                         ComplianceLevel = "complianceLevel",
                         EnableNonSecurity = false,
                         PatchFilterGroup = new PatchFilterGroupProperty {
                             PatchFilters = new [] { new PatchFilterProperty {
                                 Key = "key",
                                 Values = new [] { "values" }
                             } }
                         }
                     } }
                 },
                 ApprovedPatches = new [] { "approvedPatches" },
                 ApprovedPatchesComplianceLevel = "approvedPatchesComplianceLevel",
                 ApprovedPatchesEnableNonSecurity = false,
                 DefaultBaseline = false,
                 Description = "description",
                 GlobalFilters = new PatchFilterGroupProperty {
                     PatchFilters = new [] { new PatchFilterProperty {
                         Key = "key",
                         Values = new [] { "values" }
                     } }
                 },
                 OperatingSystem = "operatingSystem",
                 PatchGroups = new [] { "patchGroups" },
                 RejectedPatches = new [] { "rejectedPatches" },
                 RejectedPatchesAction = "rejectedPatchesAction",
                 Sources = new [] { new PatchSourceProperty {
                     Configuration = "configuration",
                     Name = "name",
                     Products = new [] { "products" }
                 } },
                 Tags = new [] { new CfnTag {
                     Key = "key",
                     Value = "value"
                 } }
             };

Synopsis

Properties

ApprovalRules	A set of rules used to include patches in the baseline.
ApprovedPatches	A list of explicitly approved patches for the baseline.
ApprovedPatchesComplianceLevel	Defines the compliance level for approved patches.
ApprovedPatchesEnableNonSecurity	Indicates whether the list of approved patches includes non-security updates that should be applied to the managed nodes.
DefaultBaseline	Indicates whether this is the default baseline.
Description	A description of the patch baseline.
GlobalFilters	A set of global filters used to include patches in the baseline.
Name	The name of the patch baseline.
OperatingSystem	Defines the operating system the patch baseline applies to.
PatchGroups	The name of the patch group to be registered with the patch baseline.
RejectedPatches	A list of explicitly rejected patches for the baseline.
RejectedPatchesAction	The action for Patch Manager to take on patches included in the `RejectedPackages` list.
Sources	Information about the patches to use to update the managed nodes, including target operating systems and source repositories.
Tags	Optional metadata that you assign to a resource.

Properties

ApprovalRules

A set of rules used to include patches in the baseline.

object? ApprovalRules { get; }

Property Value

object

Remarks

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-approvalrules

ApprovedPatches

A list of explicitly approved patches for the baseline.

string[]? ApprovedPatches { get; }

Property Value

string[]

Remarks

For information about accepted formats for lists of approved patches and rejected patches, see Package name formats for approved and rejected patch lists in the AWS Systems Manager User Guide .

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-approvedpatches

ApprovedPatchesComplianceLevel

Defines the compliance level for approved patches.

string? ApprovedPatchesComplianceLevel { get; }

Property Value

string

Remarks

When an approved patch is reported as missing, this value describes the severity of the compliance violation. The default value is UNSPECIFIED .

Default: - "UNSPECIFIED"

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-approvedpatchescompliancelevel

ApprovedPatchesEnableNonSecurity

Indicates whether the list of approved patches includes non-security updates that should be applied to the managed nodes.

object? ApprovedPatchesEnableNonSecurity { get; }

Property Value

object

Remarks

The default value is false . Applies to Linux managed nodes only.

Default: - false

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-approvedpatchesenablenonsecurity

DefaultBaseline

Indicates whether this is the default baseline.

object? DefaultBaseline { get; }

Property Value

object

Remarks

AWS Systems Manager supports creating multiple default patch baselines. For example, you can create a default patch baseline for each operating system.

Default: - false

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-defaultbaseline

Description

A description of the patch baseline.

string? Description { get; }

Property Value

string

Remarks

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-description

GlobalFilters

A set of global filters used to include patches in the baseline.

object? GlobalFilters { get; }

Property Value

object

Remarks

The <code>GlobalFilters</code> parameter can be configured only by using the AWS CLI or an AWS SDK. It can't be configured from the Patch Manager console, and its value isn't displayed in the console.

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-globalfilters

Name

The name of the patch baseline.

string Name { get; }

Property Value

string

Remarks

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-name

OperatingSystem

Defines the operating system the patch baseline applies to.

string? OperatingSystem { get; }

Property Value

string

Remarks

The default value is WINDOWS .

Default: - "WINDOWS"

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-operatingsystem

PatchGroups

The name of the patch group to be registered with the patch baseline.

string[]? PatchGroups { get; }

Property Value

string[]

Remarks

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-patchgroups

RejectedPatches

A list of explicitly rejected patches for the baseline.

string[]? RejectedPatches { get; }

Property Value

string[]

Remarks

For information about accepted formats for lists of approved patches and rejected patches, see Package name formats for approved and rejected patch lists in the AWS Systems Manager User Guide .

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-rejectedpatches

RejectedPatchesAction

The action for Patch Manager to take on patches included in the RejectedPackages list.

string? RejectedPatchesAction { get; }

Property Value

string

Remarks

Windows Server : Windows Server doesn't support the concept of package dependencies. If a package in the rejected patches list and already installed on the node, its status is reported as INSTALLED_OTHER . Any package not already installed on the node is skipped. This is the default action if no option is specified.

Default: - "ALLOW_AS_DEPENDENCY"

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-rejectedpatchesaction

Sources

Information about the patches to use to update the managed nodes, including target operating systems and source repositories.

object? Sources { get; }

Property Value

object

Remarks

Applies to Linux managed nodes only.

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-sources