available_patches

Creates, updates, deletes, gets or lists an available_patches resource.

Overview

Name	available_patches
Type	Resource
Id	aws.ssm.available_patches

Fields

The following fields are returned by SELECT queries:

describe_available_patches

Name	Datatype	Description
advisory_ids	array	The Advisory ID of the patch. For example, RHSA-2020:3779. Applies to Linux-based managed nodes only.
arch	string	The architecture of the patch. For example, in example-pkg-0.710.10-2.7.abcd.x86_64, the architecture is indicated by x86_64. Applies to Linux-based managed nodes only.
bugzilla_ids	array	The Bugzilla ID of the patch. For example, 1600646. Applies to Linux-based managed nodes only.
cve_ids	array	The Common Vulnerabilities and Exposures (CVE) ID of the patch. For example, CVE-2011-3192. Applies to Linux-based managed nodes only.
classification	string	The classification of the patch. For example, SecurityUpdates, Updates, or CriticalUpdates.
content_url	string	The URL where more information can be obtained about the patch.
description	string	The description of the patch.
epoch	integer	The epoch of the patch. For example in pkg-example-EE-20180914-2.2.amzn1.noarch, the epoch value is 20180914-2. Applies to Linux-based managed nodes only.
id	string	The ID of the patch. Applies to Windows patches only. This ID isn't the same as the Microsoft Knowledge Base ID.
kb_number	string	The Microsoft Knowledge Base ID of the patch. Applies to Windows patches only.
language	string	The language of the patch if it's language-specific.
msrc_number	string	The ID of the Microsoft Security Response Center (MSRC) bulletin the patch is related to. For example, MS14-045. Applies to Windows patches only.
msrc_severity	string	The severity of the patch, such as Critical, Important, or Moderate. Applies to Windows patches only.
name	string	The name of the patch. Applies to Linux-based managed nodes only.
product	string	The specific product the patch is applicable for. For example, WindowsServer2016 or AmazonLinux2018.03.
product_family	string	The product family the patch is applicable for. For example, Windows or Amazon Linux 2.
release	string	The particular release of a patch. For example, in pkg-example-EE-20180914-2.2.amzn1.noarch, the release is 2.amaz1. Applies to Linux-based managed nodes only.
release_date	string (date-time)	The date the patch was released.
repository	string	The source patch repository for the operating system and version, such as trusty-security for Ubuntu Server 14.04 LTE and focal-security for Ubuntu Server 20.04 LTE. Applies to Linux-based managed nodes only.
severity	string	The severity level of the patch. For example, CRITICAL or MODERATE.
title	string	The title of the patch.
vendor	string	The name of the vendor providing the patch.
version	string	The version number of the patch. For example, in example-pkg-1.710.10-2.7.abcd.x86_64, the version number is indicated by -1. Applies to Linux-based managed nodes only.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
describe_available_patches	select	region		Lists all patches eligible to be included in a patch baseline. Currently, DescribeAvailablePatches supports only the Amazon Linux 1, Amazon Linux 2, and Windows Server operating systems.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

describe_available_patches

Lists all patches eligible to be included in a patch baseline. Currently, DescribeAvailablePatches supports only the Amazon Linux 1, Amazon Linux 2, and Windows Server operating systems.

SELECT
advisory_ids,
arch,
bugzilla_ids,
cve_ids,
classification,
content_url,
description,
epoch,
id,
kb_number,
language,
msrc_number,
msrc_severity,
name,
product,
product_family,
release,
release_date,
repository,
severity,
title,
vendor,
version
FROM aws.ssm.available_patches
WHERE region = '{{ region }}' -- required
;