ALIYUN::OOS::PatchBaseline - Resource Orchestration Service

ALIYUN::OOS::PatchBaseline is used to create a patch baseline.

Syntax

{
  "Type": "ALIYUN::OOS::PatchBaseline",
  "Properties": {
    "Description": String,
    "PatchBaselineName": String,
    "OperationSystem": String,
    "ApprovalRules": Map
  }
}

Properties

Property	Type	Required	Editable	Description	Constraint
Description	String	No	Yes	The description of the patch baseline.	None.
PatchBaselineName	String	Yes	No	The name of the patch baseline.	None.
OperationSystem	String	Yes	No	The types of the OS.	Valid values: Windows Ubuntu CentOS Debian AliyunLinux RedhatEnterpriseLinux Anolis AlmaLinux
ApprovalRules	Map	Yes	Yes	The rules for scanning and installing patches for the OS.	None.

Return values

Fn::GetAtt

IsDefault: indicates whether the patch baseline is the default patch baseline.
UpdatedBy: the user who updated the patch baseline.
Description: the description of the patch baseline.
CreatedBy: the user who created the patch baseline.
UpdatedDate: the time when the patch baseline was updated.
PatchBaselineName: the name of the patch baseline.
CreateTime: the time when the patch baseline was created.
OperationSystem: the type of the OS.
ApprovalRules: the rules for scanning and installing patches for the OS.
PatchBaselineId: the ID of the patch baseline.
ShareType: the share type of the patch baseline.

Examples

YAML format

ROSTemplateFormatVersion: '2015-09-01'
Parameters: {}
Resources:
  ExtensionResource:
    Type: ALIYUN::OOS::PatchBaseline
    Properties:
      PatchBaselineName: MyPatchBaseline
      OperationSystem: Windows
      ApprovalRules:
        PatchRules:
          - PatchFilterGroup:
              - Key: PatchSet
                Values:
                  - OS
              - Key: ProductFamily
                Values:
                  - Windows
              - Key: Product
                Values:
                  - Windows 10
                  - Windows 7
              - Key: Classification
                Values:
                  - Security Updates
                  - Updates
                  - Update Rollups
                  - Critical Updates
              - Key: Severity
                Values:
                  - Critical
                  - Important
                  - Moderate
            ApproveAfterDays: 7
            EnableNonSecurity: true
            ComplianceLevel: Medium
Outputs:
  IsDefault:
    Description: Indicates whether the patch baseline is set as the default patch baseline.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - IsDefault
  UpdatedBy:
    Description: The user who last modified the patch baseline.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - UpdatedBy
  Description:
    Description: The description of the patch baseline.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - Description
  CreatedBy:
    Description: The creator of the patch baseline.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - CreatedBy
  UpdatedDate:
    Description: The time when the patch baseline was last modified.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - UpdatedDate
  PatchBaselineName:
    Description: The name of the patch baseline.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - PatchBaselineName
  CreateTime:
    Description: The time when the patch baseline was created.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - CreateTime
  OperationSystem:
    Description: The type of the operating system.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - OperationSystem
  ApprovalRules:
    Description: The rules of scanning and installing patches for the specified operating system.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - ApprovalRules
  PatchBaselineId:
    Description: The ID of the patch baseline.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - PatchBaselineId
  ShareType:
    Description: The share type of the patch baseline.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - ShareType

JSON format

{
  "ROSTemplateFormatVersion": "2015-09-01",
  "Parameters": {
  },
  "Resources": {
    "ExtensionResource": {
      "Type": "ALIYUN::OOS::PatchBaseline",
      "Properties": {
        "PatchBaselineName": "MyPatchBaseline",
        "OperationSystem": "Windows",
        "ApprovalRules": {
          "PatchRules": [
            {
              "PatchFilterGroup": [
                {
                  "Key": "PatchSet",
                  "Values": [
                    "OS"
                  ]
                },
                {
                  "Key": "ProductFamily",
                  "Values": [
                    "Windows"
                  ]
                },
                {
                  "Key": "Product",
                  "Values": [
                    "Windows 10",
                    "Windows 7"
                  ]
                },
                {
                  "Key": "Classification",
                  "Values": [
                    "Security Updates",
                    "Updates",
                    "Update Rollups",
                    "Critical Updates"
                  ]
                },
                {
                  "Key": "Severity",
                  "Values": [
                    "Critical",
                    "Important",
                    "Moderate"
                  ]
                }
              ],
              "ApproveAfterDays": 7,
              "EnableNonSecurity": true,
              "ComplianceLevel": "Medium"
            }
          ]
        }
      }
    }
  },
  "Outputs": {
    "IsDefault": {
      "Description": "Indicates whether the patch baseline is set as the default patch baseline.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "IsDefault"
        ]
      }
    },
    "UpdatedBy": {
      "Description": "The user who last modified the patch baseline.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "UpdatedBy"
        ]
      }
    },
    "Description": {
      "Description": "The description of the patch baseline.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "Description"
        ]
      }
    },
    "CreatedBy": {
      "Description": "The creator of the patch baseline.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "CreatedBy"
        ]
      }
    },
    "UpdatedDate": {
      "Description": "The time when the patch baseline was last modified.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "UpdatedDate"
        ]
      }
    },
    "PatchBaselineName": {
      "Description": "The name of the patch baseline.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "PatchBaselineName"
        ]
      }
    },
    "CreateTime": {
      "Description": "The time when the patch baseline was created.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "CreateTime"
        ]
      }
    },
    "OperationSystem": {
      "Description": "The type of the operating system.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "OperationSystem"
        ]
      }
    },
    "ApprovalRules": {
      "Description": "The rules of scanning and installing patches for the specified operating system.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "ApprovalRules"
        ]
      }
    },
    "PatchBaselineId": {
      "Description": "The ID of the patch baseline.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "PatchBaselineId"
        ]
      }
    },
    "ShareType": {
      "Description": "The share type of the patch baseline.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "ShareType"
        ]
      }
    }
  }
}