Patch Window | Update

To check the change type version, use this command:

aws amscm list-change-type-version-summaries --filter Attribute=ChangeTypeId,Value=CT_ID

INLINE CREATE:

Issue the create RFC command with execution parameters provided inline (escape quotes when providing execution parameters inline), and then submit the returned RFC ID. For example, you can replace the contents with something like this:

aws amscm create-rfc --change-type-id "ct-2utx36abv83pv" --change-type-version "2.0" --title "Patch-Window-Update-RFC" --execution-parameters "{\"DocumentName\":\"AWSManagedServices-UpdateMaintenanceWindow\",\"Region\":\"us-east-1\",\"Parameters\":{\"Duration\":[\"3\"],\"NotificationEmails\":[\"example@email.com\"],\"PatchGroupName\":[\"MyApp\"],\"Schedule\":[\"cron(0 15 ? 9 TUE *)\"],\"ScheduleTimezone\":[\"UTC\"],\"EmailAction\":[\"Add\"],\"OnlyCheckForMaintenanceWindowDrift\":[\"False\"],\"WindowId\":[\"mw-012345678910abcef\"],\"BypassDriftDetection\":[\"False\"]}}"

TEMPLATE CREATE:

1. Output the execution parameters JSON schema for this change type to a JSON file; this example names it UpdatePatchWindowParams.json:

   aws amscm get-change-type-version --change-type-id "ct-2utx36abv83pv" --query "ChangeTypeVersion.ExecutionInputSchema" --output text > UpdatePatchWindowParams.json

2. Modify and save the UpdatePatchWindowParams file.

   {
     "DocumentName": "AWSManagedServices-UpdateMaintenanceWindow",
     "Region": "us-east-1",
     "Parameters": {
       "Duration": [
         "3"
       ],
       "NotificationEmails": [
         "example@email.com"
       ],
       "PatchGroupName": [
         "MyApp"
       ],
       "Schedule": [
         "cron(0 15 ? 9 TUE *)"
       ],
       "ScheduleTimezone": [
         "UTC"
       ],
       "EmailAction": [
         "Add"
       ],
       "OnlyCheckForMaintenanceWindowDrift": [
         "False"
       ],
       "WindowId": [
         "mw-012345678910abcef"
       ],
       "BypassDriftDetection": [
           "False"
       ]
   }
   }

3. Output the RFC template to a file in your current folder; this example names it UpdatePatchWindowRfc.json:

   aws amscm create-rfc --generate-cli-skeleton > UpdatePatchWindowRfc.json

4. Modify and save the UpdatePatchWindowRfc.json file. For example, you can replace the contents with something like this:

   {
   "ChangeTypeVersion":    "2.0",	
   "ChangeTypeId":         "ct-2utx36abv83pv",
   "Title":                "Patch-Window-Update-RFC"
   }

5. Create the RFC, specifying the UpdatePatchWindowRfc file and the UpdatePatchWindowParams file:

   aws amscm create-rfc --cli-input-json file://UpdatePatchWindowRfc.json --execution-parameters file://UpdatePatchWindowParams.json

   You receive the ID of the new RFC in the response and can use it to submit and monitor the RFC. Until you submit it, the RFC remains in the editing state and does not start.

6. To view the SSM patch baseline, look in the execution output: Use the stack_id to view the patch baseline in the Systems Manager console.