You are viewing documentation for version 2 of the AWS SDK for Ruby. Version 3 documentation can be found here.

Class: Aws::SSM::Types::PatchRule

Inherits:
Struct
  • Object
show all
Defined in:
(unknown)

Overview

Note:

When passing PatchRule as input to an Aws::Client method, you can use a vanilla Hash:

{
  patch_filter_group: { # required
    patch_filters: [ # required
      {
        key: "ARCH", # required, accepts ARCH, ADVISORY_ID, BUGZILLA_ID, PATCH_SET, PRODUCT, PRODUCT_FAMILY, CLASSIFICATION, CVE_ID, EPOCH, MSRC_SEVERITY, NAME, PATCH_ID, SECTION, PRIORITY, REPOSITORY, RELEASE, SEVERITY, SECURITY, VERSION
        values: ["PatchFilterValue"], # required
      },
    ],
  },
  compliance_level: "CRITICAL", # accepts CRITICAL, HIGH, MEDIUM, LOW, INFORMATIONAL, UNSPECIFIED
  approve_after_days: 1,
  approve_until_date: "PatchStringDateTime",
  enable_non_security: false,
}

Defines an approval rule for a patch baseline.

See Also:

Instance Attribute Summary collapse

Instance Attribute Details

#approve_after_days ⇒ Integer

The number of days after the release date of each patch matched by the rule that the patch is marked as approved in the patch baseline. For example, a value of 7 means that patches are approved seven days after they are released. Not supported on Ubuntu Server.

Returns:

  • (Integer) —

    The number of days after the release date of each patch matched by the rule that the patch is marked as approved in the patch baseline.

#approve_until_date ⇒ String

The cutoff date for auto approval of released patches. Any patches released on or before this date are installed automatically. Not supported on Ubuntu Server.

Enter dates in the format YYYY-MM-DD. For example, 2020-12-31.

Returns:

  • (String) —

    The cutoff date for auto approval of released patches.

#compliance_level ⇒ String

A compliance severity level for all approved patches in a patch baseline.

Possible values:

  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
  • INFORMATIONAL
  • UNSPECIFIED

Returns:

  • (String) —

    A compliance severity level for all approved patches in a patch baseline.

#enable_non_security ⇒ Boolean

For instances identified by the approval rule filters, enables a patch baseline to apply non-security updates available in the specified repository. The default value is \'false\'. Applies to Linux instances only.

Returns:

  • (Boolean) —

    For instances identified by the approval rule filters, enables a patch baseline to apply non-security updates available in the specified repository.

#patch_filter_group ⇒ Types::PatchFilterGroup

The patch filter group that defines the criteria for the rule.

Returns: