Interface CfnPatchBaseline.IRuleProperty
The Rule
property type specifies an approval rule for a Systems Manager patch baseline.
Namespace: Amazon.CDK.AWS.SSM
Assembly: Amazon.CDK.AWS.SSM.dll
Syntax (csharp)
public interface IRuleProperty
Syntax (vb)
Public Interface IRuleProperty
Remarks
The PatchRules
property of the RuleGroup property type contains a list of Rule
property types.
ExampleMetadata: fixture=_generated
Examples
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
using Amazon.CDK.AWS.SSM;
var ruleProperty = new RuleProperty {
ApproveAfterDays = 123,
ApproveUntilDate = "approveUntilDate",
ComplianceLevel = "complianceLevel",
EnableNonSecurity = false,
PatchFilterGroup = new PatchFilterGroupProperty {
PatchFilters = new [] { new PatchFilterProperty {
Key = "key",
Values = new [] { "values" }
} }
}
};
Synopsis
Properties
ApproveAfterDays | The number of days after the release date of each patch matched by the rule that the patch is marked as approved in the patch baseline. |
ApproveUntilDate | The cutoff date for auto approval of released patches. |
ComplianceLevel | A compliance severity level for all approved patches in a patch baseline. |
EnableNonSecurity | For managed nodes identified by the approval rule filters, enables a patch baseline to apply non-security updates available in the specified repository. |
PatchFilterGroup | The patch filter group that defines the criteria for the rule. |
Properties
ApproveAfterDays
The number of days after the release date of each patch matched by the rule that the patch is marked as approved in the patch baseline.
virtual Nullable<double> ApproveAfterDays { get; }
Property Value
System.Nullable<System.Double>
Remarks
For example, a value of 7
means that patches are approved seven days after they are released.
You must specify a value for ApproveAfterDays
.
Exception: Not supported on Debian Server or Ubuntu Server.
ApproveUntilDate
The cutoff date for auto approval of released patches.
virtual string ApproveUntilDate { get; }
Property Value
System.String
Remarks
Any patches released on or before this date are installed automatically. Not supported on Debian Server or Ubuntu Server.
Enter dates in the format YYYY-MM-DD
. For example, 2021-12-31
.
ComplianceLevel
A compliance severity level for all approved patches in a patch baseline.
virtual string ComplianceLevel { get; }
Property Value
System.String
Remarks
Valid compliance severity levels include the following: UNSPECIFIED
, CRITICAL
, HIGH
, MEDIUM
, LOW
, and INFORMATIONAL
.
EnableNonSecurity
For managed nodes identified by the approval rule filters, enables a patch baseline to apply non-security updates available in the specified repository.
virtual object EnableNonSecurity { get; }
Property Value
System.Object
Remarks
The default value is false
. Applies to Linux managed nodes only.
PatchFilterGroup
The patch filter group that defines the criteria for the rule.
virtual object PatchFilterGroup { get; }
Property Value
System.Object