将 ListComplianceItems 与 CLI 配合使用
以下代码示例演示了如何使用 ListComplianceItems。
- CLI
-
- Amazon CLI
-
示例 1:列出特定实例的合规性项目
以下
list-compliance-items示例列出指定实例的所有合规性项目。aws ssm list-compliance-items \ --resource-ids"i-1234567890abcdef0"\ --resource-types"ManagedInstance"输出:
{ "ComplianceItems": [ { "ComplianceType": "Association", "ResourceType": "ManagedInstance", "ResourceId": "i-1234567890abcdef0", "Id": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111", "Title": "", "Status": "COMPLIANT", "Severity": "UNSPECIFIED", "ExecutionSummary": { "ExecutionTime": 1550408470.0 }, "Details": { "DocumentName": "AWS-GatherSoftwareInventory", "DocumentVersion": "1" } }, { "ComplianceType": "Association", "ResourceType": "ManagedInstance", "ResourceId": "i-1234567890abcdef0", "Id": "a1b2c3d4-5678-90ab-cdef-EXAMPLE22222", "Title": "", "Status": "COMPLIANT", "Severity": "UNSPECIFIED", "ExecutionSummary": { "ExecutionTime": 1550508475.0 }, "Details": { "DocumentName": "AWS-UpdateSSMAgent", "DocumentVersion": "1" } } ], "NextToken": "--token string truncated--" }有关更多信息,请参阅《Amazon Systems Manager 用户指南》中的了解有关合规性的详细信息。
示例 2:列出特定实例和关联 ID 的合规性项目
以下
list-compliance-items示例列出指定实例和关联 ID 的所有合规性项目。aws ssm list-compliance-items \ --resource-ids"i-1234567890abcdef0"\ --resource-types"ManagedInstance"\ --filters"Key=ComplianceType,Values=Association,Type=EQUAL""Key=Id,Values=a1b2c3d4-5678-90ab-cdef-EXAMPLE22222,Type=EQUAL"输出:
{ "ComplianceItems": [ { "ComplianceType": "Association", "ResourceType": "ManagedInstance", "ResourceId": "i-1234567890abcdef0", "Id": "a1b2c3d4-5678-90ab-cdef-EXAMPLE22222", "Title": "", "Status": "COMPLIANT", "Severity": "UNSPECIFIED", "ExecutionSummary": { "ExecutionTime": 1550508475.0 }, "Details": { "DocumentName": "AWS-UpdateSSMAgent", "DocumentVersion": "1" } } ] }有关更多信息,请参阅《Amazon Systems Manager 用户指南》中的了解有关合规性的详细信息。
示例 3:列出特定日期和时间之后实例的合规性项目
以下
list-compliance-items示例列出指定日期和时间之后实例的所有合规性项目。aws ssm list-compliance-items \ --resource-ids"i-1234567890abcdef0"\ --resource-types"ManagedInstance"\ --filters"Key=ExecutionTime,Values=2019-02-18T16:00:00Z,Type=GREATER_THAN"输出:
{ "ComplianceItems": [ { "ComplianceType": "Association", "ResourceType": "ManagedInstance", "ResourceId": "i-1234567890abcdef0", "Id": "a1b2c3d4-5678-90ab-cdef-EXAMPLE22222", "Title": "", "Status": "COMPLIANT", "Severity": "UNSPECIFIED", "ExecutionSummary": { "ExecutionTime": 1550508475.0 }, "Details": { "DocumentName": "AWS-UpdateSSMAgent", "DocumentVersion": "1" } } ] }有关更多信息,请参阅《Amazon Systems Manager 用户指南》中的了解有关合规性的详细信息。
-
有关 API 详细信息,请参阅《Amazon CLI Command Reference》中的 ListComplianceItems
。
-
- PowerShell
-
- 适用于 PowerShell V4 的工具
-
示例 1:此示例列出给定资源 ID 和类型的合规性项目列表,筛选合规性类型为“关联”
Get-SSMComplianceItemList -ResourceId i-1a2caf345f67d0dc2 -ResourceType ManagedInstance -Filter @{Key="ComplianceType";Values="Association"}输出。
ComplianceType : Association Details : {[DocumentName, AWS-GatherSoftwareInventory], [DocumentVersion, 1]} ExecutionSummary : Amazon.SimpleSystemsManagement.Model.ComplianceExecutionSummary Id : 123a45a1-c234-1234-1245-67891236db4e ResourceId : i-1a2caf345f67d0dc2 ResourceType : ManagedInstance Severity : UNSPECIFIED Status : COMPLIANT Title :-
有关 API 详细信息,请参阅《Amazon Tools for PowerShell Cmdlet Reference(V4)》中的 ListComplianceItems。
-
- 适用于 PowerShell V5 的工具
-
示例 1:此示例列出给定资源 ID 和类型的合规性项目列表,筛选合规性类型为“关联”
Get-SSMComplianceItemList -ResourceId i-1a2caf345f67d0dc2 -ResourceType ManagedInstance -Filter @{Key="ComplianceType";Values="Association"}输出。
ComplianceType : Association Details : {[DocumentName, AWS-GatherSoftwareInventory], [DocumentVersion, 1]} ExecutionSummary : Amazon.SimpleSystemsManagement.Model.ComplianceExecutionSummary Id : 123a45a1-c234-1234-1245-67891236db4e ResourceId : i-1a2caf345f67d0dc2 ResourceType : ManagedInstance Severity : UNSPECIFIED Status : COMPLIANT Title :-
有关 API 详细信息,请参阅《Amazon Tools for PowerShell Cmdlet 参考 (V5)》中的 ListComplianceItems。
-
有关 Amazon SDK 开发人员指南和代码示例的完整列表,请参阅 将此服务与 Amazon SDK 结合使用。本主题还包括有关入门的信息以及有关先前的 SDK 版本的详细信息。