patch_baseline_tags

Expands all tag keys and values for patch_baselines in a region

Overview

Name	patch_baseline_tags
Type	Resource
Description	Resource Type definition for AWS::SSM::PatchBaseline
Id	aws.ssm.patch_baseline_tags

Fields

Name	Datatype	Description
id	string	The ID of the patch baseline.
default_baseline	boolean	Set the baseline as default baseline. Only registering to default patch baseline is allowed.
operating_system	string	Defines the operating system the patch baseline applies to. The Default value is WINDOWS.
description	string	The description of the patch baseline.
approval_rules	object	A set of rules defining the approval rules for a patch baseline.
sources	array	Information about the patches to use to update the instances, including target operating systems and source repository. Applies to Linux instances only.
name	string	The name of the patch baseline.
rejected_patches	array	A list of explicitly rejected patches for the baseline.
approved_patches	array	A list of explicitly approved patches for the baseline.
rejected_patches_action	string	The action for Patch Manager to take on patches included in the RejectedPackages list.
patch_groups	array	PatchGroups is used to associate instances with a specific patch baseline
approved_patches_compliance_level	string	Defines the compliance level for approved patches. This means that if an approved patch is reported as missing, this is the severity of the compliance violation. The default value is UNSPECIFIED.
approved_patches_enable_non_security	boolean	Indicates whether the list of approved patches includes non-security updates that should be applied to the instances. The default value is 'false'. Applies to Linux instances only.
global_filters	object	A set of global filters used to include patches in the baseline.
tag_key	string	Tag key.
tag_value	string	Tag value.
region	string	AWS region.

Methods

Name	Accessible by	Required Params
list_resources	SELECT	region

SELECT examples

Expands tags for all patch_baselines in a region.

SELECT
region,
id,
default_baseline,
operating_system,
description,
approval_rules,
sources,
name,
rejected_patches,
approved_patches,
rejected_patches_action,
patch_groups,
approved_patches_compliance_level,
approved_patches_enable_non_security,
global_filters,
tag_key,
tag_value
FROM aws.ssm.patch_baseline_tags
WHERE region = 'us-east-1';

Permissions

For permissions required to operate on the patch_baseline_tags resource, see patch_baselines