Package com.pulumi.aws.ssm.inputs

Class PatchBaselineState

  • public final class PatchBaselineState
extends com.pulumi.resources.ResourceArgs

    • Method Detail

      • approvalRules

        public java.util.Optional<com.pulumi.core.Output<java.util.List<PatchBaselineApprovalRuleArgs>>> approvalRules()
        Returns:
        Set of rules used to include patches in the baseline. Up to 10 approval rules can be specified. See `approvalRule` below.

      • approvedPatches

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> approvedPatches()
        Returns:
        List of explicitly approved patches for the baseline. Cannot be specified with `approvalRule`.

      • approvedPatchesComplianceLevel

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> approvedPatchesComplianceLevel()
        Returns:
        Compliance level for approved patches. This means that if an approved patch is reported as missing, this is the severity of the compliance violation. Valid values are `CRITICAL`, `HIGH`, `MEDIUM`, `LOW`, `INFORMATIONAL`, `UNSPECIFIED`. The default value is `UNSPECIFIED`.

      • approvedPatchesEnableNonSecurity

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> approvedPatchesEnableNonSecurity()
        Returns:
        Whether the list of approved patches includes non-security updates that should be applied to the instances. Applies to Linux instances only.

      • arn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> arn()
        Returns:
        ARN of the baseline.

      • availableSecurityUpdatesComplianceStatus

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> availableSecurityUpdatesComplianceStatus()
        Returns:
        Indicates the compliance status of managed nodes for which security-related patches are available but were not approved. Supported for Windows Server managed nodes only. Valid values are `COMPLIANT`, `NON_COMPLIANT`.

      • description

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> description()
        Returns:
        Description of the patch baseline.

      • globalFilters

        public java.util.Optional<com.pulumi.core.Output<java.util.List<PatchBaselineGlobalFilterArgs>>> globalFilters()
        Returns:
        Set of global filters used to exclude patches from the baseline. Up to 4 global filters can be specified using Key/Value pairs. Valid Keys are `PRODUCT`, `CLASSIFICATION`, `MSRC_SEVERITY`, and `PATCH_ID`.

      • json

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> json()
        Returns:
        JSON definition of the baseline.

      • name

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> name()
        Returns:
        Name of the patch baseline. The following arguments are optional:

      • operatingSystem

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> operatingSystem()
        Returns:
        Operating system the patch baseline applies to. Valid values are `ALMA_LINUX`, `AMAZON_LINUX`, `AMAZON_LINUX_2`, `AMAZON_LINUX_2022`, `AMAZON_LINUX_2023`, `CENTOS`, `DEBIAN`, `MACOS`, `ORACLE_LINUX`, `RASPBIAN`, `REDHAT_ENTERPRISE_LINUX`, `ROCKY_LINUX`, `SUSE`, `UBUNTU`, and `WINDOWS`. The default value is `WINDOWS`.

      • region

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> region()
        Returns:
        Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

      • rejectedPatches

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> rejectedPatches()
        Returns:
        List of rejected patches.

      • rejectedPatchesAction

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> rejectedPatchesAction()
        Returns:
        Action for Patch Manager to take on patches included in the `rejectedPatches` list. Valid values are `ALLOW_AS_DEPENDENCY` and `BLOCK`.

      • sources

        public java.util.Optional<com.pulumi.core.Output<java.util.List<PatchBaselineSourceArgs>>> sources()
        Returns:
        Configuration block with alternate sources for patches. Applies to Linux instances only. See `source` below.

      • tags

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> tags()
        Returns:
        Map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.

      • tagsAll

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> tagsAll()
        Returns:
        Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.