Class CfnPatchBaselineProps

Namespace

Amazon.CDK.AWS.SSM

Assembly

Amazon.CDK.AWS.SSM.dll

Properties for defining a CfnPatchBaseline.

public class CfnPatchBaselineProps : ICfnPatchBaselineProps

Inheritance

object

CfnPatchBaselineProps

Implements

ICfnPatchBaselineProps

Inherited Members

object.GetType()

object.MemberwiseClone()

object.ToString()

object.Equals(object)

object.Equals(object, object)

object.ReferenceEquals(object, object)

object.GetHashCode()

Examples

// The code below shows an example of how to instantiate this type.
             // The values are placeholders you should change.
             using Amazon.CDK.AWS.SSM;

             var cfnPatchBaselineProps = new CfnPatchBaselineProps {
                 Name = "name",

                 // the properties below are optional
                 ApprovalRules = new RuleGroupProperty {
                     PatchRules = new [] { new RuleProperty {
                         ApproveAfterDays = 123,
                         ApproveUntilDate = "approveUntilDate",
                         ComplianceLevel = "complianceLevel",
                         EnableNonSecurity = false,
                         PatchFilterGroup = new PatchFilterGroupProperty {
                             PatchFilters = new [] { new PatchFilterProperty {
                                 Key = "key",
                                 Values = new [] { "values" }
                             } }
                         }
                     } }
                 },
                 ApprovedPatches = new [] { "approvedPatches" },
                 ApprovedPatchesComplianceLevel = "approvedPatchesComplianceLevel",
                 ApprovedPatchesEnableNonSecurity = false,
                 Description = "description",
                 GlobalFilters = new PatchFilterGroupProperty {
                     PatchFilters = new [] { new PatchFilterProperty {
                         Key = "key",
                         Values = new [] { "values" }
                     } }
                 },
                 OperatingSystem = "operatingSystem",
                 PatchGroups = new [] { "patchGroups" },
                 RejectedPatches = new [] { "rejectedPatches" },
                 RejectedPatchesAction = "rejectedPatchesAction",
                 Sources = new [] { new PatchSourceProperty {
                     Configuration = "configuration",
                     Name = "name",
                     Products = new [] { "products" }
                 } },
                 Tags = new [] { new CfnTag {
                     Key = "key",
                     Value = "value"
                 } }
             };

Remarks

Link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html

ExampleMetadata: fixture=_generated

Constructors

CfnPatchBaselineProps()

public CfnPatchBaselineProps()

Properties

ApprovalRules

A set of rules used to include patches in the baseline.

public object? ApprovalRules { get; set; }

Property Value

object

Remarks

Link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-approvalrules

ApprovedPatches

A list of explicitly approved patches for the baseline.

public string[]? ApprovedPatches { get; set; }

Property Value

string[]

Remarks

For information about accepted formats for lists of approved patches and rejected patches, see About package name formats for approved and rejected patch lists in the AWS Systems Manager User Guide .

Link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-approvedpatches

ApprovedPatchesComplianceLevel

Defines the compliance level for approved patches.

public string? ApprovedPatchesComplianceLevel { get; set; }

Property Value

string

Remarks

When an approved patch is reported as missing, this value describes the severity of the compliance violation. The default value is UNSPECIFIED .

Link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-approvedpatchescompliancelevel

ApprovedPatchesEnableNonSecurity

Indicates whether the list of approved patches includes non-security updates that should be applied to the managed nodes.

public object? ApprovedPatchesEnableNonSecurity { get; set; }

Property Value

object

Remarks

The default value is false . Applies to Linux managed nodes only.

Link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-approvedpatchesenablenonsecurity

Description

A description of the patch baseline.

public string? Description { get; set; }

Property Value

string

Remarks

Link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-description

GlobalFilters

A set of global filters used to include patches in the baseline.

public object? GlobalFilters { get; set; }

Property Value

object

Remarks

Link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-globalfilters

Name

The name of the patch baseline.

public string Name { get; set; }

Property Value

string

Remarks

Link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-name

OperatingSystem

Defines the operating system the patch baseline applies to.

public string? OperatingSystem { get; set; }

Property Value

string

Remarks

The default value is WINDOWS .

Link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-operatingsystem

PatchGroups

The name of the patch group to be registered with the patch baseline.

public string[]? PatchGroups { get; set; }

Property Value

string[]

Remarks

Link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-patchgroups

RejectedPatches

A list of explicitly rejected patches for the baseline.

public string[]? RejectedPatches { get; set; }

Property Value

string[]

Remarks

For information about accepted formats for lists of approved patches and rejected patches, see About package name formats for approved and rejected patch lists in the AWS Systems Manager User Guide .

Link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-rejectedpatches

RejectedPatchesAction

The action for Patch Manager to take on patches included in the RejectedPackages list.

public string? RejectedPatchesAction { get; set; }

Property Value

string

Remarks

Link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-rejectedpatchesaction

Sources

Information about the patches to use to update the managed nodes, including target operating systems and source repositories.

public object? Sources { get; set; }

Property Value

object

Remarks

Applies to Linux managed nodes only.

Link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-sources

Tags

Optional metadata that you assign to a resource.

public ICfnTag[]? Tags { get; set; }

Property Value

ICfnTag[]

Remarks

Tags enable you to categorize a resource in different ways, such as by purpose, owner, or environment. For example, you might want to tag a patch baseline to identify the severity level of patches it specifies and the operating system family it applies to.

Link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-tags