UpdateMaintenanceWindowTask
Modifies a task assigned to a maintenance window. You can't change the task type, but you can change the following values:
-
TaskARN
. For example, you can change aRUN_COMMAND
task fromAWS-RunPowerShellScript
toAWS-RunShellScript
. -
ServiceRoleArn
-
TaskInvocationParameters
-
Priority
-
MaxConcurrency
-
MaxErrors
Note
One or more targets must be specified for maintenance window Run Command-type tasks. Depending on the task, targets are optional for other maintenance window task types (Automation, AWS Lambda, and AWS Step Functions). For more information about running tasks that don't specify targets, see Registering maintenance window tasks without targets in the AWS Systems Manager User Guide.
If the value for a parameter in UpdateMaintenanceWindowTask
is null, then the
corresponding field isn't modified. If you set Replace
to true, then all fields
required by the RegisterTaskWithMaintenanceWindow operation are required for
this request. Optional fields that aren't specified are set to null.
Important
When you update a maintenance window task that has options specified in
TaskInvocationParameters
, you must provide again all the
TaskInvocationParameters
values that you want to retain. The values you don't
specify again are removed. For example, suppose that when you registered a Run Command task, you
specified TaskInvocationParameters
values for Comment
,
NotificationConfig
, and OutputS3BucketName
. If you update the
maintenance window task and specify only a different OutputS3BucketName
value, the
values for Comment
and NotificationConfig
are removed.
Request Syntax
{
"AlarmConfiguration": {
"Alarms": [
{
"Name": "string
"
}
],
"IgnorePollAlarmFailure": boolean
},
"CutoffBehavior": "string
",
"Description": "string
",
"LoggingInfo": {
"S3BucketName": "string
",
"S3KeyPrefix": "string
",
"S3Region": "string
"
},
"MaxConcurrency": "string
",
"MaxErrors": "string
",
"Name": "string
",
"Priority": number
,
"Replace": boolean
,
"ServiceRoleArn": "string
",
"Targets": [
{
"Key": "string
",
"Values": [ "string
" ]
}
],
"TaskArn": "string
",
"TaskInvocationParameters": {
"Automation": {
"DocumentVersion": "string
",
"Parameters": {
"string
" : [ "string
" ]
}
},
"Lambda": {
"ClientContext": "string
",
"Payload": blob
,
"Qualifier": "string
"
},
"RunCommand": {
"CloudWatchOutputConfig": {
"CloudWatchLogGroupName": "string
",
"CloudWatchOutputEnabled": boolean
},
"Comment": "string
",
"DocumentHash": "string
",
"DocumentHashType": "string
",
"DocumentVersion": "string
",
"NotificationConfig": {
"NotificationArn": "string
",
"NotificationEvents": [ "string
" ],
"NotificationType": "string
"
},
"OutputS3BucketName": "string
",
"OutputS3KeyPrefix": "string
",
"Parameters": {
"string
" : [ "string
" ]
},
"ServiceRoleArn": "string
",
"TimeoutSeconds": number
},
"StepFunctions": {
"Input": "string
",
"Name": "string
"
}
},
"TaskParameters": {
"string
" : {
"Values": [ "string
" ]
}
},
"WindowId": "string
",
"WindowTaskId": "string
"
}
Request Parameters
For information about the parameters that are common to all actions, see Common Parameters.
The request accepts the following data in JSON format.
- AlarmConfiguration
-
The CloudWatch alarm you want to apply to your maintenance window task.
Type: AlarmConfiguration object
Required: No
- CutoffBehavior
-
Indicates whether tasks should continue to run after the cutoff time specified in the maintenance windows is reached.
-
CONTINUE_TASK
: When the cutoff time is reached, any tasks that are running continue. The default value. -
CANCEL_TASK
:-
For Automation, AWS Lambda, AWS Step Functions tasks: When the cutoff time is reached, any task invocations that are already running continue, but no new task invocations are started.
-
For Run Command tasks: When the cutoff time is reached, the system sends a CancelCommand operation that attempts to cancel the command associated with the task. However, there is no guarantee that the command will be terminated and the underlying process stopped.
The status for tasks that are not completed is
TIMED_OUT
. -
Type: String
Valid Values:
CONTINUE_TASK | CANCEL_TASK
Required: No
-
- Description
-
The new task description to specify.
Type: String
Length Constraints: Minimum length of 1. Maximum length of 128.
Required: No
- LoggingInfo
-
The new logging location in Amazon S3 to specify.
Note
LoggingInfo
has been deprecated. To specify an Amazon Simple Storage Service (Amazon S3) bucket to contain logs, instead use theOutputS3BucketName
andOutputS3KeyPrefix
options in theTaskInvocationParameters
structure. For information about how AWS Systems Manager handles these options for the supported maintenance window task types, see MaintenanceWindowTaskInvocationParameters.Type: LoggingInfo object
Required: No
- MaxConcurrency
-
The new
MaxConcurrency
value you want to specify.MaxConcurrency
is the number of targets that are allowed to run this task, in parallel.Note
Although this element is listed as "Required: No", a value can be omitted only when you are registering or updating a targetless task You must provide a value in all other cases.
For maintenance window tasks without a target specified, you can't supply a value for this option. Instead, the system inserts a placeholder value of
1
. This value doesn't affect the running of your task.Type: String
Length Constraints: Minimum length of 1. Maximum length of 7.
Pattern:
^([1-9][0-9]*|[1-9][0-9]%|[1-9]%|100%)$
Required: No
- MaxErrors
-
The new
MaxErrors
value to specify.MaxErrors
is the maximum number of errors that are allowed before the task stops being scheduled.Note
Although this element is listed as "Required: No", a value can be omitted only when you are registering or updating a targetless task You must provide a value in all other cases.
For maintenance window tasks without a target specified, you can't supply a value for this option. Instead, the system inserts a placeholder value of
1
. This value doesn't affect the running of your task.Type: String
Length Constraints: Minimum length of 1. Maximum length of 7.
Pattern:
^([1-9][0-9]*|[0]|[1-9][0-9]%|[0-9]%|100%)$
Required: No
- Name
-
The new task name to specify.
Type: String
Length Constraints: Minimum length of 3. Maximum length of 128.
Pattern:
^[a-zA-Z0-9_\-.]{3,128}$
Required: No
- Priority
-
The new task priority to specify. The lower the number, the higher the priority. Tasks that have the same priority are scheduled in parallel.
Type: Integer
Valid Range: Minimum value of 0.
Required: No
- Replace
-
If True, then all fields that are required by the RegisterTaskWithMaintenanceWindow operation are also required for this API request. Optional fields that aren't specified are set to null.
Type: Boolean
Required: No
- ServiceRoleArn
-
The Amazon Resource Name (ARN) of the IAM service role for AWS Systems Manager to assume when running a maintenance window task. If you do not specify a service role ARN, Systems Manager uses a service-linked role in your account. If no appropriate service-linked role for Systems Manager exists in your account, it is created when you run
RegisterTaskWithMaintenanceWindow
.However, for an improved security posture, we strongly recommend creating a custom policy and custom service role for running your maintenance window tasks. The policy can be crafted to provide only the permissions needed for your particular maintenance window tasks. For more information, see Setting up Maintenance Windows in the in the AWS Systems Manager User Guide.
Type: String
Required: No
- Targets
-
The targets (either managed nodes or tags) to modify. Managed nodes are specified using the format
Key=instanceids,Values=instanceID_1,instanceID_2
. Tags are specified using the formatKey=tag_name,Values=tag_value
.Note
One or more targets must be specified for maintenance window Run Command-type tasks. Depending on the task, targets are optional for other maintenance window task types (Automation, AWS Lambda, and AWS Step Functions). For more information about running tasks that don't specify targets, see Registering maintenance window tasks without targets in the AWS Systems Manager User Guide.
Type: Array of Target objects
Array Members: Minimum number of 0 items. Maximum number of 5 items.
Required: No
- TaskArn
-
The task ARN to modify.
Type: String
Length Constraints: Minimum length of 1. Maximum length of 1600.
Required: No
- TaskInvocationParameters
-
The parameters that the task should use during execution. Populate only the fields that match the task type. All other fields should be empty.
Important
When you update a maintenance window task that has options specified in
TaskInvocationParameters
, you must provide again all theTaskInvocationParameters
values that you want to retain. The values you don't specify again are removed. For example, suppose that when you registered a Run Command task, you specifiedTaskInvocationParameters
values forComment
,NotificationConfig
, andOutputS3BucketName
. If you update the maintenance window task and specify only a differentOutputS3BucketName
value, the values forComment
andNotificationConfig
are removed.Type: MaintenanceWindowTaskInvocationParameters object
Required: No
- TaskParameters
-
The parameters to modify.
Note
TaskParameters
has been deprecated. To specify parameters to pass to a task when it runs, instead use theParameters
option in theTaskInvocationParameters
structure. For information about how Systems Manager handles these options for the supported maintenance window task types, see MaintenanceWindowTaskInvocationParameters.The map has the following format:
Key: string, between 1 and 255 characters
Value: an array of strings, each string is between 1 and 255 characters
Type: String to MaintenanceWindowTaskParameterValueExpression object map
Key Length Constraints: Minimum length of 1. Maximum length of 255.
Required: No
- WindowId
-
The maintenance window ID that contains the task to modify.
Type: String
Length Constraints: Fixed length of 20.
Pattern:
^mw-[0-9a-f]{17}$
Required: Yes
- WindowTaskId
-
The task ID to modify.
Type: String
Length Constraints: Fixed length of 36.
Pattern:
^[0-9a-fA-F]{8}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{12}$
Required: Yes
Response Syntax
{
"AlarmConfiguration": {
"Alarms": [
{
"Name": "string"
}
],
"IgnorePollAlarmFailure": boolean
},
"CutoffBehavior": "string",
"Description": "string",
"LoggingInfo": {
"S3BucketName": "string",
"S3KeyPrefix": "string",
"S3Region": "string"
},
"MaxConcurrency": "string",
"MaxErrors": "string",
"Name": "string",
"Priority": number,
"ServiceRoleArn": "string",
"Targets": [
{
"Key": "string",
"Values": [ "string" ]
}
],
"TaskArn": "string",
"TaskInvocationParameters": {
"Automation": {
"DocumentVersion": "string",
"Parameters": {
"string" : [ "string" ]
}
},
"Lambda": {
"ClientContext": "string",
"Payload": blob,
"Qualifier": "string"
},
"RunCommand": {
"CloudWatchOutputConfig": {
"CloudWatchLogGroupName": "string",
"CloudWatchOutputEnabled": boolean
},
"Comment": "string",
"DocumentHash": "string",
"DocumentHashType": "string",
"DocumentVersion": "string",
"NotificationConfig": {
"NotificationArn": "string",
"NotificationEvents": [ "string" ],
"NotificationType": "string"
},
"OutputS3BucketName": "string",
"OutputS3KeyPrefix": "string",
"Parameters": {
"string" : [ "string" ]
},
"ServiceRoleArn": "string",
"TimeoutSeconds": number
},
"StepFunctions": {
"Input": "string",
"Name": "string"
}
},
"TaskParameters": {
"string" : {
"Values": [ "string" ]
}
},
"WindowId": "string",
"WindowTaskId": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
The following data is returned in JSON format by the service.
- AlarmConfiguration
-
The details for the CloudWatch alarm you applied to your maintenance window task.
Type: AlarmConfiguration object
- CutoffBehavior
-
The specification for whether tasks should continue to run after the cutoff time specified in the maintenance windows is reached.
Type: String
Valid Values:
CONTINUE_TASK | CANCEL_TASK
- Description
-
The updated task description.
Type: String
Length Constraints: Minimum length of 1. Maximum length of 128.
- LoggingInfo
-
The updated logging information in Amazon S3.
Note
LoggingInfo
has been deprecated. To specify an Amazon Simple Storage Service (Amazon S3) bucket to contain logs, instead use theOutputS3BucketName
andOutputS3KeyPrefix
options in theTaskInvocationParameters
structure. For information about how AWS Systems Manager handles these options for the supported maintenance window task types, see MaintenanceWindowTaskInvocationParameters.Type: LoggingInfo object
- MaxConcurrency
-
The updated
MaxConcurrency
value.Type: String
Length Constraints: Minimum length of 1. Maximum length of 7.
Pattern:
^([1-9][0-9]*|[1-9][0-9]%|[1-9]%|100%)$
- MaxErrors
-
The updated
MaxErrors
value.Type: String
Length Constraints: Minimum length of 1. Maximum length of 7.
Pattern:
^([1-9][0-9]*|[0]|[1-9][0-9]%|[0-9]%|100%)$
- Name
-
The updated task name.
Type: String
Length Constraints: Minimum length of 3. Maximum length of 128.
Pattern:
^[a-zA-Z0-9_\-.]{3,128}$
- Priority
-
The updated priority value.
Type: Integer
Valid Range: Minimum value of 0.
- ServiceRoleArn
-
The Amazon Resource Name (ARN) of the IAM service role for AWS Systems Manager to assume when running a maintenance window task. If you do not specify a service role ARN, Systems Manager uses a service-linked role in your account. If no appropriate service-linked role for Systems Manager exists in your account, it is created when you run
RegisterTaskWithMaintenanceWindow
.However, for an improved security posture, we strongly recommend creating a custom policy and custom service role for running your maintenance window tasks. The policy can be crafted to provide only the permissions needed for your particular maintenance window tasks. For more information, see Setting up Maintenance Windows in the in the AWS Systems Manager User Guide.
Type: String
- Targets
-
The updated target values.
Type: Array of Target objects
Array Members: Minimum number of 0 items. Maximum number of 5 items.
- TaskArn
-
The updated task ARN value.
Type: String
Length Constraints: Minimum length of 1. Maximum length of 1600.
- TaskInvocationParameters
-
The updated parameter values.
Type: MaintenanceWindowTaskInvocationParameters object
- TaskParameters
-
The updated parameter values.
Note
TaskParameters
has been deprecated. To specify parameters to pass to a task when it runs, instead use theParameters
option in theTaskInvocationParameters
structure. For information about how Systems Manager handles these options for the supported maintenance window task types, see MaintenanceWindowTaskInvocationParameters.Type: String to MaintenanceWindowTaskParameterValueExpression object map
Key Length Constraints: Minimum length of 1. Maximum length of 255.
- WindowId
-
The ID of the maintenance window that was updated.
Type: String
Length Constraints: Fixed length of 20.
Pattern:
^mw-[0-9a-f]{17}$
- WindowTaskId
-
The task ID of the maintenance window that was updated.
Type: String
Length Constraints: Fixed length of 36.
Pattern:
^[0-9a-fA-F]{8}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{12}$
Errors
For information about the errors that are common to all actions, see Common Errors.
- DoesNotExistException
-
Error returned when the ID specified for a resource, such as a maintenance window or patch baseline, doesn't exist.
For information about resource quotas in AWS Systems Manager, see Systems Manager service quotas in the Amazon Web Services General Reference.
HTTP Status Code: 400
- InternalServerError
-
An error occurred on the server side.
HTTP Status Code: 500
Examples
Example
This example illustrates one usage of UpdateMaintenanceWindowTask.
Sample Request
POST / HTTP/1.1
Host: ssm.us-east-2.amazonaws.com
Accept-Encoding: identity
X-Amz-Target: AmazonSSM.UpdateMaintenanceWindowTask
Content-Type: application/x-amz-json-1.1
User-Agent: aws-cli/2.0.0 Python/3.7.5 Windows/10 botocore/2.0.0dev4
X-Amz-Date: 20240225T010531Z
Authorization: AWS4-HMAC-SHA256 Credential=AKIAIOSFODNN7EXAMPLE/20240225/us-east-2/ssm/aws4_request,
SignedHeaders=content-type;host;x-amz-date;x-amz-target, Signature=39c3b3042cd2aEXAMPLE
Content-Length: 244
{
"WindowId": "mw-0c50858d01EXAMPLE",
"WindowTaskId": "50772993-c6b5-4a2a-8d04-7bfd7EXAMPLE",
"Priority": 2,
"MaxConcurrency": "10",
"MaxErrors": "3",
"Name": "MyRevisedMaintenanceWindowTask",
"Description": "My updated maintenance window task",
"ServiceRoleArn": "arn:aws:iam::111122223333:role/aws-service-role/ssm.amazonaws.com/MyCustomMaintenanceWindowTaskRole"
}
Sample Response
{
"Description": "My updated maintenance window task",
"MaxConcurrency": "10",
"MaxErrors": "3",
"Name": "MyRevisedMaintenanceWindowTask",
"Priority": 2,
"ServiceRoleArn": "arn:aws:iam::111122223333:role/aws-service-role/ssm.amazonaws.com/MyCustomMaintenanceWindowTaskRole",
"Targets": [
{
"Key": "WindowTargetIds",
"Values": [
"23639a0b-ddbc-4bca-9e72-78d96EXAMPLE"
]
}
],
"TaskArn": "AWS-ApplyPatchBaseline",
"TaskInvocationParameters": {
"RunCommand": {
"Comment": "",
"Parameters": {
"Operation": [
"Install"
],
"SnapshotId": [
""
]
},
"TimeoutSeconds": 600
}
},
"TaskParameters": {},
"WindowId": "mw-0c50858d01EXAMPLE",
"WindowTaskId": "50772993-c6b5-4a2a-8d04-7bfd7EXAMPLE"
}
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following: