instance_patches

Creates, updates, deletes, gets or lists an instance_patches resource.

Overview

Name	instance_patches
Type	Resource
Id	aws.ssm.instance_patches

Fields

The following fields are returned by SELECT queries:

describe_instance_patches

Name	Datatype	Description
cve_ids	string	The IDs of one or more Common Vulnerabilities and Exposure (CVE) issues that are resolved by the patch. Currently, CVE ID values are reported only for patches with a status of Missing or Failed.
classification	string	The classification of the patch, such as SecurityUpdates, Updates, and CriticalUpdates.
installed_time	string (date-time)	The date/time the patch was installed on the managed node. Not all operating systems provide this level of information.
kb_id	string	The operating system-specific ID of the patch.
severity	string	The severity of the patch such as Critical, Important, and Moderate.
state	string	The state of the patch on the managed node, such as INSTALLED or FAILED. For descriptions of each patch state, see About patch compliance in the Amazon Web Services Systems Manager User Guide. (INSTALLED, INSTALLED_OTHER, INSTALLED_PENDING_REBOOT, INSTALLED_REJECTED, MISSING, NOT_APPLICABLE, FAILED, AVAILABLE_SECURITY_UPDATE)
title	string	The title of the patch.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
describe_instance_patches	select	region		Retrieves information about the patches on the specified managed node and their state relative to the patch baseline being used for the node.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

describe_instance_patches

Retrieves information about the patches on the specified managed node and their state relative to the patch baseline being used for the node.

SELECT
cve_ids,
classification,
installed_time,
kb_id,
severity,
state,
title
FROM aws.ssm.instance_patches
WHERE region = '{{ region }}' -- required
;