AWS Systems Manager Patch Group
This page shows how to write Terraform and CloudFormation for Systems Manager Patch Group and write them securely.
aws_ssm_patch_group (Terraform)
The Patch Group in Systems Manager can be configured in Terraform with the resource name aws_ssm_patch_group. The following sections describe 2 examples of how to use the resource and its parameters.
Example Usage from GitHub
resource "aws_ssm_patch_group" "patchgroup-scan-default" {
count = var.default_scan ? 9 : 0
baseline_id = element([
data.aws_ssm_patch_baseline.windows.id,
data.aws_ssm_patch_baseline.suse.id,
data.aws_ssm_patch_baseline.ubuntu.id,
resource "aws_ssm_patch_group" "test-patchgroup" {
baseline_id = aws_ssm_patch_baseline.test-baseline.id
patch_group = "test-amazon-linux"
}
resource "aws_ssm_patch_group" "prod-patchgroup" {
Parameters
-
baseline_idrequired - string -
idoptional computed - string -
patch_grouprequired - string
Explanation in Terraform Registry
Provides an SSM Patch Group resource
AWS::SSM::PatchBaseline PatchFilterGroup (CloudFormation)
The PatchBaseline PatchFilterGroup in SSM can be configured in CloudFormation with the resource name AWS::SSM::PatchBaseline PatchFilterGroup. The following sections describe how to use the resource and its parameters.
Example Usage from GitHub
An example could not be found in GitHub.
Parameters
PatchFilters
The set of patch filters that make up the group.
Required: No
Type: List of PatchFilter
Maximum: 4
Update requires: No interruption
Explanation in CloudFormation Registry
The
PatchFilterGroupproperty type specifies a set of patch filters for an AWS Systems Manager patch baseline, typically used for approval rules for a Systems Manager patch baseline.PatchFilterGroupis the property type for theGlobalFiltersproperty of the AWS::SSM::PatchBaseline resource and thePatchFilterGroupproperty of the Rule property type.
Frequently asked questions
What is AWS Systems Manager Patch Group?
AWS Systems Manager Patch Group is a resource for Systems Manager of Amazon Web Service. Settings can be wrote in Terraform and CloudFormation.
Where can I find the example code for the AWS Systems Manager Patch Group?
For Terraform, the THOM-AwS/terraform-patch-manager and csa-bconnors/ssm-tf-demo source code examples are useful. See the Terraform Example section for further details.
