ALIYUN::OOS::PatchBaseline

ALIYUN::OOS::PatchBaseline类型用于创建一个补丁基线。

语法

{
  "Type": "ALIYUN::OOS::PatchBaseline",
  "Properties": {
    "Description": String,
    "PatchBaselineName": String,
    "OperationSystem": String,
    "ApprovalRules": Map,
    "RejectedPatchesAction": String,
    "Sources": List,
    "ResourceGroupId": String,
    "ApprovedPatchesEnableNonSecurity": Boolean,
    "RejectedPatches": List,
    "ApprovedPatches": List,
    "Tags": List
  }
}

属性

属性名称

类型

必须

允许更新

描述

约束

Description

String

补丁基线描述信息。

PatchBaselineName

String

补丁基线名称。

OperationSystem

String

操作系统类型。

取值:

  • Windows

  • Ubuntu

  • CentOS

  • Debian

  • AliyunLinux

  • RedhatEnterpriseLinux

  • Anolis

  • AlmaLinux

ApprovalRules

Map

接受规则。

RejectedPatchesAction

String

拒绝补丁的操作。

Sources

List

补丁源配置列表。

ResourceGroupId

String

资源组ID。

ApprovedPatchesEnableNonSecurity

Boolean

批准补丁是否包括除安全性之外的更新。

RejectedPatches

List

拒绝补丁的名称。

ApprovedPatches

List

批准补丁的列表。

Tags

List

标签列表。

更多信息,请参见Tags属性

Tags语法

"Tags": [
  {
    "Key": String,
    "Value": String
  }
]

Tags属性

属性名称

类型

必须

允许更新

描述

约束

Key

String

标签键。

Value

String

标签值。

返回值

Fn::GetAtt

  • IsDefault:是否为默认补丁基线。

  • UpdatedBy:补丁基线更新者。

  • Description:补丁基线描述信息。

  • CreatedBy:补丁基线创建者。

  • UpdatedDate:更新时间。

  • PatchBaselineName:补丁基线名称。

  • CreateTime:创建时间。

  • OperationSystem:操作系统类型。

  • ApprovalRules:接受规则。

  • PatchBaselineId:补丁基线ID。

  • ShareType:补丁基线共享类型。

  • Tags: 补丁基线绑定的标签。

  • RejectedPatches: 拒绝补丁的名称列表。

  • Sources:补丁源配置列表。

  • RejectedPatchesAction:拒绝补丁的操作。

  • ResourceGroupId:资源组ID。

  • ApprovedPatchesEnableNonSecurity:批准补丁是否包括除安全性之外的更新。

  • ApprovedPatches:批准补丁的列表。

示例

YAML格式

ROSTemplateFormatVersion: '2015-09-01'
Parameters: {}
Resources:
  ExtensionResource:
    Type: ALIYUN::OOS::PatchBaseline
    Properties:
      PatchBaselineName: MyPatchBaseline
      OperationSystem: Windows
      ApprovalRules:
        PatchRules:
          - PatchFilterGroup:
              - Key: PatchSet
                Values:
                  - OS
              - Key: ProductFamily
                Values:
                  - Windows
              - Key: Product
                Values:
                  - Windows 10
                  - Windows 7
              - Key: Classification
                Values:
                  - Security Updates
                  - Updates
                  - Update Rollups
                  - Critical Updates
              - Key: Severity
                Values:
                  - Critical
                  - Important
                  - Moderate
            ApproveAfterDays: 7
            EnableNonSecurity: true
            ComplianceLevel: Medium
Outputs:
  IsDefault:
    Description: Indicates whether the patch baseline is set as the default patch baseline.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - IsDefault
  UpdatedBy:
    Description: The user who last modified the patch baseline.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - UpdatedBy
  Description:
    Description: The description of the patch baseline.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - Description
  CreatedBy:
    Description: The creator of the patch baseline.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - CreatedBy
  UpdatedDate:
    Description: The time when the patch baseline was last modified.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - UpdatedDate
  PatchBaselineName:
    Description: The name of the patch baseline.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - PatchBaselineName
  CreateTime:
    Description: The time when the patch baseline was created.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - CreateTime
  OperationSystem:
    Description: The type of the operating system.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - OperationSystem
  ApprovalRules:
    Description: The rules of scanning and installing patches for the specified operating system.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - ApprovalRules
  PatchBaselineId:
    Description: The ID of the patch baseline.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - PatchBaselineId
  ShareType:
    Description: The share type of the patch baseline.
    Value:
      Fn::GetAtt:
        - ExtensionResource
        - ShareType

JSON格式

{
  "ROSTemplateFormatVersion": "2015-09-01",
  "Parameters": {
  },
  "Resources": {
    "ExtensionResource": {
      "Type": "ALIYUN::OOS::PatchBaseline",
      "Properties": {
        "PatchBaselineName": "MyPatchBaseline",
        "OperationSystem": "Windows",
        "ApprovalRules": {
          "PatchRules": [
            {
              "PatchFilterGroup": [
                {
                  "Key": "PatchSet",
                  "Values": [
                    "OS"
                  ]
                },
                {
                  "Key": "ProductFamily",
                  "Values": [
                    "Windows"
                  ]
                },
                {
                  "Key": "Product",
                  "Values": [
                    "Windows 10",
                    "Windows 7"
                  ]
                },
                {
                  "Key": "Classification",
                  "Values": [
                    "Security Updates",
                    "Updates",
                    "Update Rollups",
                    "Critical Updates"
                  ]
                },
                {
                  "Key": "Severity",
                  "Values": [
                    "Critical",
                    "Important",
                    "Moderate"
                  ]
                }
              ],
              "ApproveAfterDays": 7,
              "EnableNonSecurity": true,
              "ComplianceLevel": "Medium"
            }
          ]
        }
      }
    }
  },
  "Outputs": {
    "IsDefault": {
      "Description": "Indicates whether the patch baseline is set as the default patch baseline.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "IsDefault"
        ]
      }
    },
    "UpdatedBy": {
      "Description": "The user who last modified the patch baseline.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "UpdatedBy"
        ]
      }
    },
    "Description": {
      "Description": "The description of the patch baseline.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "Description"
        ]
      }
    },
    "CreatedBy": {
      "Description": "The creator of the patch baseline.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "CreatedBy"
        ]
      }
    },
    "UpdatedDate": {
      "Description": "The time when the patch baseline was last modified.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "UpdatedDate"
        ]
      }
    },
    "PatchBaselineName": {
      "Description": "The name of the patch baseline.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "PatchBaselineName"
        ]
      }
    },
    "CreateTime": {
      "Description": "The time when the patch baseline was created.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "CreateTime"
        ]
      }
    },
    "OperationSystem": {
      "Description": "The type of the operating system.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "OperationSystem"
        ]
      }
    },
    "ApprovalRules": {
      "Description": "The rules of scanning and installing patches for the specified operating system.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "ApprovalRules"
        ]
      }
    },
    "PatchBaselineId": {
      "Description": "The ID of the patch baseline.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "PatchBaselineId"
        ]
      }
    },
    "ShareType": {
      "Description": "The share type of the patch baseline.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionResource",
          "ShareType"
        ]
      }
    }
  }
}