Package software.amazon.awscdk.services.ssm

Class CfnPatchBaselineProps.Jsii$Proxy

java.lang.Object

software.amazon.jsii.JsiiObject

software.amazon.awscdk.services.ssm.CfnPatchBaselineProps.Jsii$Proxy

All Implemented Interfaces:

CfnPatchBaselineProps, software.amazon.jsii.JsiiSerializable

Enclosing interface:

CfnPatchBaselineProps

@Stability(Stable)
@Internal
public static final class CfnPatchBaselineProps.Jsii$Proxy
extends software.amazon.jsii.JsiiObject
implements CfnPatchBaselineProps

An implementation for CfnPatchBaselineProps

Nested Class Summary

Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject

software.amazon.jsii.JsiiObject.InitializationMode

Nested classes/interfaces inherited from interface software.amazon.awscdk.services.ssm.CfnPatchBaselineProps

CfnPatchBaselineProps.Builder, CfnPatchBaselineProps.Jsii$Proxy

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	Jsii$Proxy(CfnPatchBaselineProps.Builder builder)	Constructor that initializes the object based on literal property values passed by the CfnPatchBaselineProps.Builder.
protected	Jsii$Proxy(software.amazon.jsii.JsiiObjectRef objRef)	Constructor that initializes the object based on values retrieved from the JsiiObject.

Method Summary

Modifier and Type	Method	Description
com.fasterxml.jackson.databind.JsonNode	$jsii$toJson()
final boolean	equals(Object o)
final Object	getApprovalRules()	A set of rules used to include patches in the baseline.
final List<String>	getApprovedPatches()	A list of explicitly approved patches for the baseline.
final String	getApprovedPatchesComplianceLevel()	Defines the compliance level for approved patches.
final Object	getApprovedPatchesEnableNonSecurity()	Indicates whether the list of approved patches includes non-security updates that should be applied to the managed nodes.
final String	getAvailableSecurityUpdatesComplianceStatus()	Indicates the status you want to assign to security patches that are available but not approved because they don't meet the installation criteria specified in the patch baseline.
final Object	getDefaultBaseline()	Indicates whether this is the default baseline.
final String	getDescription()	A description of the patch baseline.
final Object	getGlobalFilters()	A set of global filters used to include patches in the baseline.
final String	getName()	The name of the patch baseline.
final String	getOperatingSystem()	Defines the operating system the patch baseline applies to.
final List<String>	getPatchGroups()	The name of the patch group to be registered with the patch baseline.
final List<String>	getRejectedPatches()	A list of explicitly rejected patches for the baseline.
final String	getRejectedPatchesAction()	The action for Patch Manager to take on patches included in the RejectedPackages list.
final Object	getSources()	Information about the patches to use to update the managed nodes, including target operating systems and source repositories.
final List<CfnTag>	getTags()	Optional metadata that you assign to a resource.
final int	hashCode()

Methods inherited from class software.amazon.jsii.JsiiObject

jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSet

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, toString, wait, wait, wait

Constructor Details

Jsii$Proxy

protected Jsii$Proxy(software.amazon.jsii.JsiiObjectRef objRef)

Constructor that initializes the object based on values retrieved from the JsiiObject.

Parameters:

objRef - Reference to the JSII managed object.

Jsii$Proxy

protected Jsii$Proxy(CfnPatchBaselineProps.Builder builder)

Constructor that initializes the object based on literal property values passed by the CfnPatchBaselineProps.Builder.

Method Details

getName

public final String getName()

Description copied from interface: CfnPatchBaselineProps

The name of the patch baseline.

Specified by:

getName in interface CfnPatchBaselineProps

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-name

getApprovalRules

public final Object getApprovalRules()

Description copied from interface: CfnPatchBaselineProps

A set of rules used to include patches in the baseline.

Returns union: either IResolvable or CfnPatchBaseline.RuleGroupProperty

Specified by:

getApprovalRules in interface CfnPatchBaselineProps

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-approvalrules

getApprovedPatches

public final List<String> getApprovedPatches()

Description copied from interface: CfnPatchBaselineProps

A list of explicitly approved patches for the baseline.

For information about accepted formats for lists of approved patches and rejected patches, see Package name formats for approved and rejected patch lists in the AWS Systems Manager User Guide .

Specified by:

getApprovedPatches in interface CfnPatchBaselineProps

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-approvedpatches

getApprovedPatchesComplianceLevel

public final String getApprovedPatchesComplianceLevel()

Description copied from interface: CfnPatchBaselineProps

Defines the compliance level for approved patches.

When an approved patch is reported as missing, this value describes the severity of the compliance violation. The default value is UNSPECIFIED .

Default: - "UNSPECIFIED"

Specified by:

getApprovedPatchesComplianceLevel in interface CfnPatchBaselineProps

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-approvedpatchescompliancelevel

getApprovedPatchesEnableNonSecurity

public final Object getApprovedPatchesEnableNonSecurity()

Description copied from interface: CfnPatchBaselineProps

Indicates whether the list of approved patches includes non-security updates that should be applied to the managed nodes.

The default value is false . Applies to Linux managed nodes only.

Returns union: either Boolean or IResolvable

Default: - false

Specified by:

getApprovedPatchesEnableNonSecurity in interface CfnPatchBaselineProps

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-approvedpatchesenablenonsecurity

getAvailableSecurityUpdatesComplianceStatus

public final String getAvailableSecurityUpdatesComplianceStatus()

Description copied from interface: CfnPatchBaselineProps

Indicates the status you want to assign to security patches that are available but not approved because they don't meet the installation criteria specified in the patch baseline.

Example scenario: Security patches that you might want installed can be skipped if you have specified a long period to wait after a patch is released before installation. If an update to the patch is released during your specified waiting period, the waiting period for installing the patch starts over. If the waiting period is too long, multiple versions of the patch could be released but never installed.

Supported for Windows Server managed nodes only.

Specified by:

getAvailableSecurityUpdatesComplianceStatus in interface CfnPatchBaselineProps

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-availablesecurityupdatescompliancestatus

getDefaultBaseline

public final Object getDefaultBaseline()

Description copied from interface: CfnPatchBaselineProps

Indicates whether this is the default baseline.

AWS Systems Manager supports creating multiple default patch baselines. For example, you can create a default patch baseline for each operating system.

Returns union: either Boolean or IResolvable

Default: - false

Specified by:

getDefaultBaseline in interface CfnPatchBaselineProps

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-defaultbaseline

getDescription

public final String getDescription()

Description copied from interface: CfnPatchBaselineProps

A description of the patch baseline.

Specified by:

getDescription in interface CfnPatchBaselineProps

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-description

getGlobalFilters

public final Object getGlobalFilters()

Description copied from interface: CfnPatchBaselineProps

A set of global filters used to include patches in the baseline.

The GlobalFilters parameter can be configured only by using the AWS CLI or an AWS SDK. It can't be configured from the Patch Manager console, and its value isn't displayed in the console.

Returns union: either IResolvable or CfnPatchBaseline.PatchFilterGroupProperty

Specified by:

getGlobalFilters in interface CfnPatchBaselineProps

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-globalfilters

getOperatingSystem

public final String getOperatingSystem()

Description copied from interface: CfnPatchBaselineProps

Defines the operating system the patch baseline applies to.

The default value is WINDOWS .

Default: - "WINDOWS"

Specified by:

getOperatingSystem in interface CfnPatchBaselineProps

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-operatingsystem

getPatchGroups

public final List<String> getPatchGroups()

Description copied from interface: CfnPatchBaselineProps

The name of the patch group to be registered with the patch baseline.

Specified by:

getPatchGroups in interface CfnPatchBaselineProps

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-patchgroups

getRejectedPatches

public final List<String> getRejectedPatches()

Description copied from interface: CfnPatchBaselineProps

A list of explicitly rejected patches for the baseline.

For information about accepted formats for lists of approved patches and rejected patches, see Package name formats for approved and rejected patch lists in the AWS Systems Manager User Guide .

Specified by:

getRejectedPatches in interface CfnPatchBaselineProps

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-rejectedpatches

getRejectedPatchesAction

public final String getRejectedPatchesAction()

Description copied from interface: CfnPatchBaselineProps

The action for Patch Manager to take on patches included in the RejectedPackages list.

• ALLOW_AS_DEPENDENCY - Linux and macOS : A package in the rejected patches list is installed only if it is a dependency of another package. It is considered compliant with the patch baseline, and its status is reported as INSTALLED_OTHER . This is the default action if no option is specified.

Windows Server : Windows Server doesn't support the concept of package dependencies. If a package in the rejected patches list and already installed on the node, its status is reported as INSTALLED_OTHER . Any package not already installed on the node is skipped. This is the default action if no option is specified.

• BLOCK - All OSs : Packages in the rejected patches list, and packages that include them as dependencies, aren't installed by Patch Manager under any circumstances.

State value assignment for patch compliance:

• If a package was installed before it was added to the rejected patches list, or is installed outside of Patch Manager afterward, it's considered noncompliant with the patch baseline and its status is reported as INSTALLED_REJECTED .
• If an update attempts to install a dependency package that is now rejected by the baseline, when previous versions of the package were not rejected, the package being updated is reported as MISSING for SCAN operations and as FAILED for INSTALL operations.

Default: - "ALLOW_AS_DEPENDENCY"

Specified by:

getRejectedPatchesAction in interface CfnPatchBaselineProps

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-rejectedpatchesaction

getSources

public final Object getSources()

Description copied from interface: CfnPatchBaselineProps

Information about the patches to use to update the managed nodes, including target operating systems and source repositories.

Applies to Linux managed nodes only.

Returns union: either IResolvable or Listinvalid input: '<'either IResolvable or CfnPatchBaseline.PatchSourceProperty>

Specified by:

getSources in interface CfnPatchBaselineProps

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-sources

getTags

public final List<CfnTag> getTags()

Description copied from interface: CfnPatchBaselineProps

Optional metadata that you assign to a resource.

Tags enable you to categorize a resource in different ways, such as by purpose, owner, or environment. For example, you might want to tag a patch baseline to identify the severity level of patches it specifies and the operating system family it applies to.

Specified by:

getTags in interface CfnPatchBaselineProps

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-patchbaseline.html#cfn-ssm-patchbaseline-tags

$jsii$toJson

@Internal
public com.fasterxml.jackson.databind.JsonNode $jsii$toJson()

Specified by:

$jsii$toJson in interface software.amazon.jsii.JsiiSerializable

equals

public final boolean equals(Object o)

Overrides:

equals in class Object

hashCode

public final int hashCode()

Overrides:

hashCode in class Object