Skip to content

Commit 645466c

Browse files
author
awstools
committed
feat(client-ssm): This release adds the AvailableSecurityUpdatesComplianceStatus field to patch baseline operations, as well as the AvailableSecurityUpdateCount and InstancesWithAvailableSecurityUpdates to patch state operations. Applies to Windows Server managed nodes only.
1 parent 31b766e commit 645466c

14 files changed

+281
-102
lines changed

‎clients/client-ssm/src/commands/CreatePatchBaselineCommand.ts

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -95,6 +95,7 @@ export interface CreatePatchBaselineCommandOutput extends CreatePatchBaselineRes
9595
* Configuration: "STRING_VALUE", // required
9696
* },
9797
* ],
98+
* AvailableSecurityUpdatesComplianceStatus: "COMPLIANT" || "NON_COMPLIANT",
9899
* ClientToken: "STRING_VALUE",
99100
* Tags: [ // TagList
100101
* { // Tag

‎clients/client-ssm/src/commands/DescribeInstancePatchStatesCommand.ts

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -65,6 +65,7 @@ export interface DescribeInstancePatchStatesCommandOutput extends DescribeInstan
6565
* // FailedCount: Number("int"),
6666
* // UnreportedNotApplicableCount: Number("int"),
6767
* // NotApplicableCount: Number("int"),
68+
* // AvailableSecurityUpdateCount: Number("int"),
6869
* // OperationStartTime: new Date("TIMESTAMP"), // required
6970
* // OperationEndTime: new Date("TIMESTAMP"), // required
7071
* // Operation: "Scan" || "Install", // required

‎clients/client-ssm/src/commands/DescribeInstancePatchStatesForPatchGroupCommand.ts

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -79,6 +79,7 @@ export interface DescribeInstancePatchStatesForPatchGroupCommandOutput
7979
* // FailedCount: Number("int"),
8080
* // UnreportedNotApplicableCount: Number("int"),
8181
* // NotApplicableCount: Number("int"),
82+
* // AvailableSecurityUpdateCount: Number("int"),
8283
* // OperationStartTime: new Date("TIMESTAMP"), // required
8384
* // OperationEndTime: new Date("TIMESTAMP"), // required
8485
* // Operation: "Scan" || "Install", // required

‎clients/client-ssm/src/commands/DescribeInstancePatchesCommand.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@ export interface DescribeInstancePatchesCommandOutput extends DescribeInstancePa
5858
* // KBId: "STRING_VALUE", // required
5959
* // Classification: "STRING_VALUE", // required
6060
* // Severity: "STRING_VALUE", // required
61-
* // State: "INSTALLED" || "INSTALLED_OTHER" || "INSTALLED_PENDING_REBOOT" || "INSTALLED_REJECTED" || "MISSING" || "NOT_APPLICABLE" || "FAILED", // required
61+
* // State: "INSTALLED" || "INSTALLED_OTHER" || "INSTALLED_PENDING_REBOOT" || "INSTALLED_REJECTED" || "MISSING" || "NOT_APPLICABLE" || "FAILED" || "AVAILABLE_SECURITY_UPDATE", // required
6262
* // InstalledTime: new Date("TIMESTAMP"), // required
6363
* // CVEIds: "STRING_VALUE",
6464
* // },

‎clients/client-ssm/src/commands/DescribePatchGroupStateCommand.ts

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -53,6 +53,7 @@ export interface DescribePatchGroupStateCommandOutput extends DescribePatchGroup
5353
* // InstancesWithCriticalNonCompliantPatches: Number("int"),
5454
* // InstancesWithSecurityNonCompliantPatches: Number("int"),
5555
* // InstancesWithOtherNonCompliantPatches: Number("int"),
56+
* // InstancesWithAvailableSecurityUpdates: Number("int"),
5657
* // };
5758
*
5859
* ```

‎clients/client-ssm/src/commands/GetDeployablePatchSnapshotForInstanceCommand.ts

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -106,6 +106,7 @@ export interface GetDeployablePatchSnapshotForInstanceCommandOutput
106106
* Configuration: "STRING_VALUE", // required
107107
* },
108108
* ],
109+
* AvailableSecurityUpdatesComplianceStatus: "COMPLIANT" || "NON_COMPLIANT",
109110
* },
110111
* };
111112
* const command = new GetDeployablePatchSnapshotForInstanceCommand(input);

‎clients/client-ssm/src/commands/GetPatchBaselineCommand.ts

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -102,6 +102,7 @@ export interface GetPatchBaselineCommandOutput extends GetPatchBaselineResult, _
102102
* // Configuration: "STRING_VALUE", // required
103103
* // },
104104
* // ],
105+
* // AvailableSecurityUpdatesComplianceStatus: "COMPLIANT" || "NON_COMPLIANT",
105106
* // };
106107
*
107108
* ```

‎clients/client-ssm/src/commands/ResetServiceSettingCommand.ts

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,7 @@ import { Command as $Command } from "@smithy/smithy-client";
55
import { MetadataBearer as __MetadataBearer } from "@smithy/types";
66

77
import { commonParams } from "../endpoint/EndpointParameters";
8-
import { ResetServiceSettingRequest } from "../models/models_1";
9-
import { ResetServiceSettingResult } from "../models/models_2";
8+
import { ResetServiceSettingRequest, ResetServiceSettingResult } from "../models/models_2";
109
import { de_ResetServiceSettingCommand, se_ResetServiceSettingCommand } from "../protocols/Aws_json1_1";
1110
import { ServiceInputTypes, ServiceOutputTypes, SSMClientResolvedConfig } from "../SSMClient";
1211

‎clients/client-ssm/src/commands/UpdatePatchBaselineCommand.ts

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -97,6 +97,7 @@ export interface UpdatePatchBaselineCommandOutput extends UpdatePatchBaselineRes
9797
* Configuration: "STRING_VALUE", // required
9898
* },
9999
* ],
100+
* AvailableSecurityUpdatesComplianceStatus: "COMPLIANT" || "NON_COMPLIANT",
100101
* Replace: true || false,
101102
* };
102103
* const command = new UpdatePatchBaselineCommand(input);
@@ -156,6 +157,7 @@ export interface UpdatePatchBaselineCommandOutput extends UpdatePatchBaselineRes
156157
* // Configuration: "STRING_VALUE", // required
157158
* // },
158159
* // ],
160+
* // AvailableSecurityUpdatesComplianceStatus: "COMPLIANT" || "NON_COMPLIANT",
159161
* // };
160162
*
161163
* ```

‎clients/client-ssm/src/models/models_0.ts

Lines changed: 38 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -3762,6 +3762,20 @@ export interface PatchRuleGroup {
37623762
PatchRules: PatchRule[] | undefined;
37633763
}
37643764

3765+
/**
3766+
* @public
3767+
* @enum
3768+
*/
3769+
export const PatchComplianceStatus = {
3770+
Compliant: "COMPLIANT",
3771+
NonCompliant: "NON_COMPLIANT",
3772+
} as const;
3773+
3774+
/**
3775+
* @public
3776+
*/
3777+
export type PatchComplianceStatus = (typeof PatchComplianceStatus)[keyof typeof PatchComplianceStatus];
3778+
37653779
/**
37663780
* @public
37673781
* @enum
@@ -3958,6 +3972,20 @@ export interface CreatePatchBaselineRequest {
39583972
*/
39593973
Sources?: PatchSource[] | undefined;
39603974

3975+
/**
3976+
* <p>Indicates the status you want to assign to security patches that are available but not
3977+
* approved because they don't meet the installation criteria specified in the patch
3978+
* baseline.</p>
3979+
* <p>Example scenario: Security patches that you might want installed can be skipped if you have
3980+
* specified a long period to wait after a patch is released before installation. If an update to
3981+
* the patch is released during your specified waiting period, the waiting period for installing the
3982+
* patch starts over. If the waiting period is too long, multiple versions of the patch could be
3983+
* released but never installed.</p>
3984+
* <p>Supported for Windows Server managed nodes only.</p>
3985+
* @public
3986+
*/
3987+
AvailableSecurityUpdatesComplianceStatus?: PatchComplianceStatus | undefined;
3988+
39613989
/**
39623990
* <p>User-provided idempotency token.</p>
39633991
* @public
@@ -7985,6 +8013,7 @@ export interface DescribeInstancePatchesRequest {
79858013
* @enum
79868014
*/
79878015
export const PatchComplianceDataState = {
8016+
AvailableSecurityUpdate: "AVAILABLE_SECURITY_UPDATE",
79888017
Failed: "FAILED",
79898018
Installed: "INSTALLED",
79908019
InstalledOther: "INSTALLED_OTHER",
@@ -8267,6 +8296,15 @@ export interface InstancePatchState {
82678296
*/
82688297
NotApplicableCount?: number | undefined;
82698298

8299+
/**
8300+
* <p>The number of security-related patches that are available but not approved because they
8301+
* didn't meet the patch baseline requirements. For example, an updated version of a patch might
8302+
* have been released before the specified auto-approval period was over.</p>
8303+
* <p>Applies to Windows Server managed nodes only.</p>
8304+
* @public
8305+
*/
8306+
AvailableSecurityUpdateCount?: number | undefined;
8307+
82708308
/**
82718309
* <p>The time the most recent patching operation was started on the managed node.</p>
82728310
* @public
@@ -9624,31 +9662,6 @@ export interface DescribeMaintenanceWindowScheduleRequest {
96249662
NextToken?: string | undefined;
96259663
}
96269664

9627-
/**
9628-
* <p>Information about a scheduled execution for a maintenance window.</p>
9629-
* @public
9630-
*/
9631-
export interface ScheduledWindowExecution {
9632-
/**
9633-
* <p>The ID of the maintenance window to be run.</p>
9634-
* @public
9635-
*/
9636-
WindowId?: string | undefined;
9637-
9638-
/**
9639-
* <p>The name of the maintenance window to be run.</p>
9640-
* @public
9641-
*/
9642-
Name?: string | undefined;
9643-
9644-
/**
9645-
* <p>The time, in ISO-8601 Extended format, that the maintenance window is scheduled to be
9646-
* run.</p>
9647-
* @public
9648-
*/
9649-
ExecutionTime?: string | undefined;
9650-
}
9651-
96529665
/**
96539666
* @internal
96549667
*/

‎clients/client-ssm/src/models/models_1.ts

Lines changed: 66 additions & 70 deletions
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,7 @@ import {
2727
OpsItemNotification,
2828
PatchAction,
2929
PatchComplianceLevel,
30+
PatchComplianceStatus,
3031
PatchFilterGroup,
3132
PatchOrchestratorFilter,
3233
PatchRuleGroup,
@@ -41,7 +42,6 @@ import {
4142
ResourceTypeForTagging,
4243
ReviewStatus,
4344
Runbook,
44-
ScheduledWindowExecution,
4545
StepExecution,
4646
Tag,
4747
Target,
@@ -50,6 +50,31 @@ import {
5050

5151
import { SSMServiceException as __BaseException } from "./SSMServiceException";
5252

53+
/**
54+
* <p>Information about a scheduled execution for a maintenance window.</p>
55+
* @public
56+
*/
57+
export interface ScheduledWindowExecution {
58+
/**
59+
* <p>The ID of the maintenance window to be run.</p>
60+
* @public
61+
*/
62+
WindowId?: string | undefined;
63+
64+
/**
65+
* <p>The name of the maintenance window to be run.</p>
66+
* @public
67+
*/
68+
Name?: string | undefined;
69+
70+
/**
71+
* <p>The time, in ISO-8601 Extended format, that the maintenance window is scheduled to be
72+
* run.</p>
73+
* @public
74+
*/
75+
ExecutionTime?: string | undefined;
76+
}
77+
5378
/**
5479
* @public
5580
*/
@@ -1458,6 +1483,16 @@ export interface DescribePatchGroupStateResult {
14581483
* @public
14591484
*/
14601485
InstancesWithOtherNonCompliantPatches?: number | undefined;
1486+
1487+
/**
1488+
* <p>The number of managed nodes for which security-related patches are available but not
1489+
* approved because because they didn't meet the patch baseline requirements. For example, an
1490+
* updated version of a patch might have been released before the specified auto-approval period was
1491+
* over.</p>
1492+
* <p>Applies to Windows Server managed nodes only.</p>
1493+
* @public
1494+
*/
1495+
InstancesWithAvailableSecurityUpdates?: number | undefined;
14611496
}
14621497

14631498
/**
@@ -2689,6 +2724,16 @@ export interface BaselineOverride {
26892724
* @public
26902725
*/
26912726
Sources?: PatchSource[] | undefined;
2727+
2728+
/**
2729+
* <p>Indicates whether managed nodes for which there are available security-related patches that
2730+
* have not been approved by the baseline are being defined as <code>COMPLIANT</code> or
2731+
* <code>NON_COMPLIANT</code>. This option is specified when the <code>CreatePatchBaseline</code>
2732+
* or <code>UpdatePatchBaseline</code> commands are run.</p>
2733+
* <p>Applies to Windows Server managed nodes only.</p>
2734+
* @public
2735+
*/
2736+
AvailableSecurityUpdatesComplianceStatus?: PatchComplianceStatus | undefined;
26922737
}
26932738

26942739
/**
@@ -5290,6 +5335,15 @@ export interface GetPatchBaselineResult {
52905335
* @public
52915336
*/
52925337
Sources?: PatchSource[] | undefined;
5338+
5339+
/**
5340+
* <p>Indicates the compliance status of managed nodes for which security-related patches are
5341+
* available but were not approved. This preference is specified when the
5342+
* <code>CreatePatchBaseline</code> or <code>UpdatePatchBaseline</code> commands are run.</p>
5343+
* <p>Applies to Windows Server managed nodes only.</p>
5344+
* @public
5345+
*/
5346+
AvailableSecurityUpdatesComplianceStatus?: PatchComplianceStatus | undefined;
52935347
}
52945348

52955349
/**
@@ -9252,7 +9306,8 @@ export interface ModifyDocumentPermissionRequest {
92529306

92539307
/**
92549308
* <p>The Amazon Web Services users that should have access to the document. The account IDs can either be a
9255-
* group of account IDs or <i>All</i>. </p>
9309+
* group of account IDs or <i>All</i>. You must specify a value for this parameter or
9310+
* the <code>AccountIdsToRemove</code> parameter.</p>
92569311
* @public
92579312
*/
92589313
AccountIdsToAdd?: string[] | undefined;
@@ -9261,7 +9316,8 @@ export interface ModifyDocumentPermissionRequest {
92619316
* <p>The Amazon Web Services users that should no longer have access to the document. The Amazon Web Services user
92629317
* can either be a group of account IDs or <i>All</i>. This action has a higher
92639318
* priority than <code>AccountIdsToAdd</code>. If you specify an ID to add and the same ID to
9264-
* remove, the system removes access to the document. </p>
9319+
* remove, the system removes access to the document. You must specify a value for this parameter or
9320+
* the <code>AccountIdsToAdd</code> parameter.</p>
92659321
* @public
92669322
*/
92679323
AccountIdsToRemove?: string[] | undefined;
@@ -10000,10 +10056,13 @@ export interface PutParameterRequest {
1000010056
* </ul>
1000110057
* <p>For additional information about valid values for parameter names, see <a href="https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-paramstore-su-create.html">Creating Systems Manager parameters</a> in the <i>Amazon Web Services Systems Manager User Guide</i>.</p>
1000210058
* <note>
10003-
* <p>The maximum length constraint of 2048 characters listed below includes 1037 characters
10004-
* reserved for internal use by Systems Manager. The maximum length for a parameter name that you create is
10005-
* 1011 characters. This includes the characters in the ARN that precede the name you specify, such
10006-
* as <code>arn:aws:ssm:us-east-2:111122223333:parameter/</code>.</p>
10059+
* <p>The reported maximum length of 2048 characters for a parameter name includes 1037
10060+
* characters that are reserved for internal use by Systems Manager. The maximum length for a parameter name
10061+
* that you specify is 1011 characters.</p>
10062+
* <p>This count of 1011 characters includes the characters in the ARN that precede the name you
10063+
* specify. This ARN length will vary depending on your partition and Region. For example, the
10064+
* following 45 characters count toward the 1011 character maximum for a parameter created in the
10065+
* US East (Ohio) Region: <code>arn:aws:ssm:us-east-2:111122223333:parameter/</code>.</p>
1000710066
* </note>
1000810067
* @public
1000910068
*/
@@ -10786,69 +10845,6 @@ export interface RemoveTagsFromResourceRequest {
1078610845
*/
1078710846
export interface RemoveTagsFromResourceResult {}
1078810847

10789-
/**
10790-
* <p>The request body of the ResetServiceSetting API operation.</p>
10791-
* @public
10792-
*/
10793-
export interface ResetServiceSettingRequest {
10794-
/**
10795-
* <p>The Amazon Resource Name (ARN) of the service setting to reset. The setting ID can be one of
10796-
* the following.</p>
10797-
* <ul>
10798-
* <li>
10799-
* <p>
10800-
* <code>/ssm/appmanager/appmanager-enabled</code>
10801-
* </p>
10802-
* </li>
10803-
* <li>
10804-
* <p>
10805-
* <code>/ssm/automation/customer-script-log-destination</code>
10806-
* </p>
10807-
* </li>
10808-
* <li>
10809-
* <p>
10810-
* <code>/ssm/automation/customer-script-log-group-name</code>
10811-
* </p>
10812-
* </li>
10813-
* <li>
10814-
* <p>/ssm/automation/enable-adaptive-concurrency</p>
10815-
* </li>
10816-
* <li>
10817-
* <p>
10818-
* <code>/ssm/documents/console/public-sharing-permission</code>
10819-
* </p>
10820-
* </li>
10821-
* <li>
10822-
* <p>
10823-
* <code>/ssm/managed-instance/activation-tier</code>
10824-
* </p>
10825-
* </li>
10826-
* <li>
10827-
* <p>
10828-
* <code>/ssm/managed-instance/default-ec2-instance-management-role</code>
10829-
* </p>
10830-
* </li>
10831-
* <li>
10832-
* <p>
10833-
* <code>/ssm/opsinsights/opscenter</code>
10834-
* </p>
10835-
* </li>
10836-
* <li>
10837-
* <p>
10838-
* <code>/ssm/parameter-store/default-parameter-tier</code>
10839-
* </p>
10840-
* </li>
10841-
* <li>
10842-
* <p>
10843-
* <code>/ssm/parameter-store/high-throughput-enabled</code>
10844-
* </p>
10845-
* </li>
10846-
* </ul>
10847-
* @public
10848-
*/
10849-
SettingId: string | undefined;
10850-
}
10851-
1085210848
/**
1085310849
* @internal
1085410850
*/

0 commit comments

Comments
 (0)