use ALIYUN::OOS::PatchBaseline to create a patch baseline - Resource Orchestration Service

ALIYUN::OOS::PatchBaseline is used to create a patch baseline.

Syntax

{
  "Type": "ALIYUN::OOS::PatchBaseline",
  "Properties": {
    "Description": String,
    "PatchBaselineName": String,
    "OperationSystem": String,
    "ApprovalRules": Map,
    "RejectedPatchesAction": String,
    "Sources": List,
    "ResourceGroupId": String,
    "ApprovedPatchesEnableNonSecurity": Boolean,
    "RejectedPatches": List,
    "ApprovedPatches": List,
    "Tags": List
  }
}

Properties

Property	Type	Required	Editable	Description	Constraint
Description	String	No	Yes	The description of the patch baseline.	None.
PatchBaselineName	String	Yes	No	The name of the patch baseline.	None.
OperationSystem	String	Yes	No	The OS type.	Valid values: Windows Ubuntu CentOS Debian AliyunLinux RedhatEnterpriseLinux Anolis AlmaLinux
ApprovalRules	Map	Yes	Yes	The rules for scanning and installing patches for the OS.	None.
RejectedPatchesAction	String	No	Yes	The action of the rejected patch.	None.
Sources	List	No	Yes	The configurations of the patch sources.	None.
ResourceGroupId	String	No	Yes	The ID of the resource group.	None.
ApprovedPatchesEnableNonSecurity	Boolean	No	Yes	Specifies whether the approved patch involves updates other than security-related updates.	None.
RejectedPatches	List	No	Yes	The names of the rejected patches.	None.
ApprovedPatches	List	No	Yes	The names of the approved patches.	None.
Tags	List	No	Yes	The tags.	For more information, see Tags properties.

Tags syntax

"Tags": [
  {
    "Key": String,
    "Value": String
  }
]

Tags properties

Property	Type	Required	Editable	Description	Constraint
Key	String	Yes	No	The tag key.	None.
Value	String	No	No	The tag value.	None.

Return values

Fn::GetAtt

IsDefault: indicates whether the patch baseline is the default patch baseline.
UpdatedBy: the user who updated the patch baseline.
Description: the description of the patch baseline.
CreatedBy: the user who created the patch baseline.
UpdatedDate: the time when the patch baseline was updated.
PatchBaselineName: the name of the patch baseline.
CreateTime: the time when the patch baseline was created.
OperationSystem: the OS type.
ApprovalRules: the rules for scanning and installing patches for the OS.
PatchBaselineId: the ID of the patch baseline.
ShareType: the share type of the patch baseline.

Examples

YAML format

ROSTemplateFormatVersion: '2015-09-01'
Parameters: {}
Resources:
  ExtensionResource:
    Type: ALIYUN::OOS::PatchBaseline
    Properties:
      PatchBaselineName: MyPatchBaseline
      OperationSystem: Windows
      ApprovalRules:
        PatchRules:
          - PatchFilterGroup:
              - Key: PatchSet
                Values:
                  - OS
              - Key: ProductFamily
                Values:
                  - Windows
              - Key: Product
                Values:
                  - Windows 10
                  - Windows 7
              - Key: Classification
                Values:
                  - Security Updates
                  - Updates
                  - Update Rollups
                  - Critical Updates
              - Key: Severity
                Values:
                  - Critical
                  - Important
                  - Moderate
            ApproveAfterDays: 7
            EnableNonSecurity: true
            ComplianceLevel: Medium
Outputs:
  IsDefault:
    Description: Indicates whether the patch baseline is set as the default patch baseline.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - IsDefault
  UpdatedBy:
    Description: The user who last modified the patch baseline.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - UpdatedBy
  Description:
    Description: The description of the patch baseline.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - Description
  CreatedBy:
    Description: The creator of the patch baseline.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - CreatedBy
  UpdatedDate:
    Description: The time when the patch baseline was last modified.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - UpdatedDate
  PatchBaselineName:
    Description: The name of the patch baseline.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - PatchBaselineName
  CreateTime:
    Description: The time when the patch baseline was created.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - CreateTime
  OperationSystem:
    Description: The type of the operating system.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - OperationSystem
  ApprovalRules:
    Description: The rules of scanning and installing patches for the specified operating system.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - ApprovalRules
  PatchBaselineId:
    Description: The ID of the patch baseline.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - PatchBaselineId
  ShareType:
    Description: The share type of the patch baseline.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - ShareType

JSON format

{
  "ROSTemplateFormatVersion": "2015-09-01",
  "Parameters": {
  },
  "Resources": {
    "ExtensionResource": {
      "Type": "ALIYUN::OOS::PatchBaseline",
      "Properties": {
        "PatchBaselineName": "MyPatchBaseline",
        "OperationSystem": "Windows",
        "ApprovalRules": {
          "PatchRules": [
            {
              "PatchFilterGroup": [
                {
                  "Key": "PatchSet",
                  "Values": [
                    "OS"
                  ]
                },
                {
                  "Key": "ProductFamily",
                  "Values": [
                    "Windows"
                  ]
                },
                {
                  "Key": "Product",
                  "Values": [
                    "Windows 10",
                    "Windows 7"
                  ]
                },
                {
                  "Key": "Classification",
                  "Values": [
                    "Security Updates",
                    "Updates",
                    "Update Rollups",
                    "Critical Updates"
                  ]
                },
                {
                  "Key": "Severity",
                  "Values": [
                    "Critical",
                    "Important",
                    "Moderate"
                  ]
                }
              ],
              "ApproveAfterDays": 7,
              "EnableNonSecurity": true,
              "ComplianceLevel": "Medium"
            }
          ]
        }
      }
    }
  },
  "Outputs": {
    "IsDefault": {
      "Description": "Indicates whether the patch baseline is set as the default patch baseline.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "IsDefault"
        ]
      }
    },
    "UpdatedBy": {
      "Description": "The user who last modified the patch baseline.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "UpdatedBy"
        ]
      }
    },
    "Description": {
      "Description": "The description of the patch baseline.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "Description"
        ]
      }
    },
    "CreatedBy": {
      "Description": "The creator of the patch baseline.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "CreatedBy"
        ]
      }
    },
    "UpdatedDate": {
      "Description": "The time when the patch baseline was last modified.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "UpdatedDate"
        ]
      }
    },
    "PatchBaselineName": {
      "Description": "The name of the patch baseline.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "PatchBaselineName"
        ]
      }
    },
    "CreateTime": {
      "Description": "The time when the patch baseline was created.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "CreateTime"
        ]
      }
    },
    "OperationSystem": {
      "Description": "The type of the operating system.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "OperationSystem"
        ]
      }
    },
    "ApprovalRules": {
      "Description": "The rules of scanning and installing patches for the specified operating system.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "ApprovalRules"
        ]
      }
    },
    "PatchBaselineId": {
      "Description": "The ID of the patch baseline.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "PatchBaselineId"
        ]
      }
    },
    "ShareType": {
      "Description": "The share type of the patch baseline.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "ShareType"
        ]
      }
    }
  }
}