class
Amazonite::Ssm::PatchRule
- Amazonite::Ssm::PatchRule
- Reference
- Object
Overview
Defines an approval rule for a patch baseline.
Included Modules
- JSON::Serializable
Defined in:
ssm/patch_rule.crConstructors
- .new(pull : JSON::PullParser)
- .new(patch_filter_group : PatchFilterGroup, compliance_level : PatchComplianceLevel | Nil = nil, approve_after_days : Int32 | Nil = nil, approve_until_date : String | Nil = nil, enable_non_security : Bool | Nil = nil)
- .new(*, __pull_for_json_serializable pull : JSON::PullParser)
Instance Method Summary
-
#==(other : self)
Returns
trueif this reference is the same as other. -
#approve_after_days : Int32 | Nil
The number of days after the release date of each patch matched by the rule that the patch is marked as approved in the patch baseline.
-
#approve_after_days=(approve_after_days : Int32 | Nil)
The number of days after the release date of each patch matched by the rule that the patch is marked as approved in the patch baseline.
-
#approve_until_date : String | Nil
The cutoff date for auto approval of released patches.
-
#approve_until_date=(approve_until_date : String | Nil)
The cutoff date for auto approval of released patches.
-
#compliance_level : PatchComplianceLevel | Nil
A compliance severity level for all approved patches in a patch baseline.
-
#compliance_level=(compliance_level : PatchComplianceLevel | Nil)
A compliance severity level for all approved patches in a patch baseline.
-
#enable_non_security : Bool | Nil
For managed nodes identified by the approval rule filters, enables a patch baseline to apply non-security updates available in the specified repository.
-
#enable_non_security=(enable_non_security : Bool | Nil)
For managed nodes identified by the approval rule filters, enables a patch baseline to apply non-security updates available in the specified repository.
-
#hash(hasher)
See
Object#hash(hasher) -
#patch_filter_group : PatchFilterGroup
The patch filter group that defines the criteria for the rule.
-
#patch_filter_group=(patch_filter_group : PatchFilterGroup)
The patch filter group that defines the criteria for the rule.
- #validate! : Nil
Constructor Detail
Instance Method Detail
Returns true if this reference is the same as other. Invokes same?.
The number of days after the release date of each patch matched by the rule that the patch is
marked as approved in the patch baseline. For example, a value of 7 means that patches are
approved seven days after they are released.
Patch Manager evaluates patch release dates using Coordinated Universal Time (UTC). If a patch
is released at 2025-11-09T18:00:00Z and ApproveAfterDays is set to 7, the patch will be
approved after 2025-11-16T18:00:00Z.
This parameter is marked as Required: No, but your request must include a value for either
ApproveAfterDays or ApproveUntilDate.
Not supported for Debian Server or Ubuntu Server.
Use caution when setting this value for Windows Server patch baselines. Because patch updates that are replaced by later updates are removed, setting too broad a value for this parameter can result in crucial patches not being installed. For more information, see the Windows Server tab in the topic How security patches are selected in the Amazon Web Services Systems Manager User Guide.
The number of days after the release date of each patch matched by the rule that the patch is
marked as approved in the patch baseline. For example, a value of 7 means that patches are
approved seven days after they are released.
Patch Manager evaluates patch release dates using Coordinated Universal Time (UTC). If a patch
is released at 2025-11-09T18:00:00Z and ApproveAfterDays is set to 7, the patch will be
approved after 2025-11-16T18:00:00Z.
This parameter is marked as Required: No, but your request must include a value for either
ApproveAfterDays or ApproveUntilDate.
Not supported for Debian Server or Ubuntu Server.
Use caution when setting this value for Windows Server patch baselines. Because patch updates that are replaced by later updates are removed, setting too broad a value for this parameter can result in crucial patches not being installed. For more information, see the Windows Server tab in the topic How security patches are selected in the Amazon Web Services Systems Manager User Guide.
The cutoff date for auto approval of released patches. Any patches released on or before this date are installed automatically.
Enter dates in the format YYYY-MM-DD. For example, 2025-11-16.
Patch Manager evaluates patch release dates using Coordinated Universal Time (UTC). If you enter
the date 2025-11-16, patches released between 2025-11-16T00:00:00Z and
2025-11-16T23:59:59Z will be included in the approval.
This parameter is marked as Required: No, but your request must include a value for either
ApproveUntilDate or ApproveAfterDays.
Not supported for Debian Server or Ubuntu Server.
Use caution when setting this value for Windows Server patch baselines. Because patch updates that are replaced by later updates are removed, setting too broad a value for this parameter can result in crucial patches not being installed. For more information, see the Windows Server tab in the topic How security patches are selected in the Amazon Web Services Systems Manager User Guide.
The cutoff date for auto approval of released patches. Any patches released on or before this date are installed automatically.
Enter dates in the format YYYY-MM-DD. For example, 2025-11-16.
Patch Manager evaluates patch release dates using Coordinated Universal Time (UTC). If you enter
the date 2025-11-16, patches released between 2025-11-16T00:00:00Z and
2025-11-16T23:59:59Z will be included in the approval.
This parameter is marked as Required: No, but your request must include a value for either
ApproveUntilDate or ApproveAfterDays.
Not supported for Debian Server or Ubuntu Server.
Use caution when setting this value for Windows Server patch baselines. Because patch updates that are replaced by later updates are removed, setting too broad a value for this parameter can result in crucial patches not being installed. For more information, see the Windows Server tab in the topic How security patches are selected in the Amazon Web Services Systems Manager User Guide.
A compliance severity level for all approved patches in a patch baseline.
A compliance severity level for all approved patches in a patch baseline.
For managed nodes identified by the approval rule filters, enables a patch baseline to apply
non-security updates available in the specified repository. The default value is false.
Applies to Linux managed nodes only.
For managed nodes identified by the approval rule filters, enables a patch baseline to apply
non-security updates available in the specified repository. The default value is false.
Applies to Linux managed nodes only.
The patch filter group that defines the criteria for the rule.
The patch filter group that defines the criteria for the rule.