aws-sdk-ssm 1.165.0 → 1.167.0

Sign up to get free protection for your applications and to get access to all the features.
@@ -1932,8 +1932,8 @@ module Aws::SSM
1932
1932
  # command at the same time. You can specify a number of managed nodes,
1933
1933
  # such as 10, or a percentage of nodes, such as 10%. The default value
1934
1934
  # is 50. For more information about how to use `MaxConcurrency`, see
1935
- # [Running commands using Systems Manager Run Command][1] in the
1936
- # *Amazon Web Services Systems Manager User Guide*.
1935
+ # [Amazon Web Services Systems Manager Run Command][1] in the *Amazon
1936
+ # Web Services Systems Manager User Guide*.
1937
1937
  #
1938
1938
  #
1939
1939
  #
@@ -1945,7 +1945,7 @@ module Aws::SSM
1945
1945
  # the command to additional targets. You can specify a number of
1946
1946
  # errors, such as 10, or a percentage or errors, such as 10%. The
1947
1947
  # default value is `0`. For more information about how to use
1948
- # `MaxErrors`, see [Running commands using Systems Manager Run
1948
+ # `MaxErrors`, see [Amazon Web Services Systems Manager Run
1949
1949
  # Command][1] in the *Amazon Web Services Systems Manager User Guide*.
1950
1950
  #
1951
1951
  #
@@ -2464,11 +2464,11 @@ module Aws::SSM
2464
2464
  # A summary of the call execution that includes an execution ID, the
2465
2465
  # type of execution (for example, `Command`), and the date/time of the
2466
2466
  # execution using a datetime object that is saved in the following
2467
- # format: yyyy-MM-dd'T'HH:mm:ss'Z'.
2467
+ # format: `yyyy-MM-dd'T'HH:mm:ss'Z'`
2468
2468
  #
2469
2469
  # @!attribute [rw] execution_time
2470
2470
  # The time the execution ran as a datetime object that is saved in the
2471
- # following format: yyyy-MM-dd'T'HH:mm:ss'Z'.
2471
+ # following format: `yyyy-MM-dd'T'HH:mm:ss'Z'`
2472
2472
  # @return [Time]
2473
2473
  #
2474
2474
  # @!attribute [rw] execution_id
@@ -2707,8 +2707,9 @@ module Aws::SSM
2707
2707
  # want to assign to the managed node. This IAM role must provide
2708
2708
  # AssumeRole permissions for the Amazon Web Services Systems Manager
2709
2709
  # service principal `ssm.amazonaws.com`. For more information, see
2710
- # [Create an IAM service role for a hybrid environment][1] in the
2711
- # *Amazon Web Services Systems Manager User Guide*.
2710
+ # [Create an IAM service role for a hybrid and multicloud
2711
+ # environment][1] in the *Amazon Web Services Systems Manager User
2712
+ # Guide*.
2712
2713
  #
2713
2714
  # <note markdown="1"> You can't specify an IAM service-linked role for this parameter.
2714
2715
  # You must create a unique role.
@@ -3061,8 +3062,8 @@ module Aws::SSM
3061
3062
  # @return [String]
3062
3063
  #
3063
3064
  # @!attribute [rw] document_version
3064
- # The document version you want to associate with the target(s). Can
3065
- # be a specific version or the default version.
3065
+ # The document version you want to associate with the targets. Can be
3066
+ # a specific version or the default version.
3066
3067
  #
3067
3068
  # State Manager doesn't support running associations that use a new
3068
3069
  # version of a document if that document is shared from another
@@ -3098,8 +3099,8 @@ module Aws::SSM
3098
3099
  # in an Amazon Web Services account, or individual managed node IDs.
3099
3100
  # You can target all managed nodes in an Amazon Web Services account
3100
3101
  # by specifying the `InstanceIds` key with a value of `*`. For more
3101
- # information about choosing targets for an association, see [Using
3102
- # targets and rate controls with State Manager associations][1] in the
3102
+ # information about choosing targets for an association, see [About
3103
+ # targets and rate controls in State Manager associations][1] in the
3103
3104
  # *Amazon Web Services Systems Manager User Guide*.
3104
3105
  #
3105
3106
  #
@@ -3109,7 +3110,7 @@ module Aws::SSM
3109
3110
  #
3110
3111
  # @!attribute [rw] schedule_expression
3111
3112
  # A cron expression when the association will be applied to the
3112
- # target(s).
3113
+ # targets.
3113
3114
  # @return [String]
3114
3115
  #
3115
3116
  # @!attribute [rw] output_location
@@ -3313,16 +3314,17 @@ module Aws::SSM
3313
3314
  # For examples, see the following topics in the *Amazon Web Services
3314
3315
  # Systems Manager User Guide*.
3315
3316
  #
3316
- # * [Create an SSM document (Amazon Web Services API)][1]
3317
+ # * [Create an SSM document (console)][1]
3317
3318
  #
3318
- # * [Create an SSM document (Amazon Web Services CLI)][2]
3319
+ # * [Create an SSM document (command line)][2]
3319
3320
  #
3320
- # * [Create an SSM document (API)][1]
3321
+ # * [Create an SSM document (API)][3]
3321
3322
  #
3322
3323
  #
3323
3324
  #
3324
- # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/create-ssm-document-api.html
3325
- # [2]: https://docs.aws.amazon.com/systems-manager/latest/userguide/create-ssm-document-cli.html
3325
+ # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/documents-using.html#create-ssm-console
3326
+ # [2]: https://docs.aws.amazon.com/systems-manager/latest/userguide/documents-using.html#create-ssm-document-cli
3327
+ # [3]: https://docs.aws.amazon.com/systems-manager/latest/userguide/documents-using.html#create-ssm-document-api
3326
3328
  # @return [String]
3327
3329
  #
3328
3330
  # @!attribute [rw] requires
@@ -3357,6 +3359,12 @@ module Aws::SSM
3357
3359
  # * `amazon`
3358
3360
  #
3359
3361
  # * `amzn`
3362
+ #
3363
+ # * `AWSEC2`
3364
+ #
3365
+ # * `AWSConfigRemediation`
3366
+ #
3367
+ # * `AWSSupport`
3360
3368
  # @return [String]
3361
3369
  #
3362
3370
  # @!attribute [rw] display_name
@@ -3462,6 +3470,11 @@ module Aws::SSM
3462
3470
  # the maintenance window to become active. `StartDate` allows you to
3463
3471
  # delay activation of the maintenance window until the specified
3464
3472
  # future date.
3473
+ #
3474
+ # <note markdown="1"> When using a rate schedule, if you provide a start date that occurs
3475
+ # in the past, the current date and time are used as the start date.
3476
+ #
3477
+ # </note>
3465
3478
  # @return [String]
3466
3479
  #
3467
3480
  # @!attribute [rw] end_date
@@ -3633,8 +3646,8 @@ module Aws::SSM
3633
3646
  # resource in the request. Use the `/aws/automations` key in
3634
3647
  # OperationalData to associate an Automation runbook with the OpsItem.
3635
3648
  # To view Amazon Web Services CLI example commands that use these
3636
- # keys, see [Creating OpsItems manually][1] in the *Amazon Web
3637
- # Services Systems Manager User Guide*.
3649
+ # keys, see [Create OpsItems manually][1] in the *Amazon Web Services
3650
+ # Systems Manager User Guide*.
3638
3651
  #
3639
3652
  #
3640
3653
  #
@@ -3877,12 +3890,13 @@ module Aws::SSM
3877
3890
  # baseline, and its status is reported as `InstalledOther`. This is
3878
3891
  # the default action if no option is specified.
3879
3892
  #
3880
- # * <b> <code>BLOCK</code> </b>: Packages in the `RejectedPatches`
3881
- # list, and packages that include them as dependencies, aren't
3882
- # installed under any circumstances. If a package was installed
3883
- # before it was added to the Rejected patches list, it is considered
3884
- # non-compliant with the patch baseline, and its status is reported
3885
- # as `InstalledRejected`.
3893
+ # * **BLOCK**: Packages in the **Rejected patches** list, and packages
3894
+ # that include them as dependencies, aren't installed by Patch
3895
+ # Manager under any circumstances. If a package was installed before
3896
+ # it was added to the **Rejected patches** list, or is installed
3897
+ # outside of Patch Manager afterward, it's considered noncompliant
3898
+ # with the patch baseline and its status is reported as
3899
+ # *InstalledRejected*.
3886
3900
  # @return [String]
3887
3901
  #
3888
3902
  # @!attribute [rw] description
@@ -4155,8 +4169,8 @@ module Aws::SSM
4155
4169
  #
4156
4170
  # @!attribute [rw] deletion_summary
4157
4171
  # A summary of the delete operation. For more information about this
4158
- # summary, see [Deleting custom inventory][1] in the *Amazon Web
4159
- # Services Systems Manager User Guide*.
4172
+ # summary, see [Understanding the delete inventory summary][1] in the
4173
+ # *Amazon Web Services Systems Manager User Guide*.
4160
4174
  #
4161
4175
  #
4162
4176
  #
@@ -5410,6 +5424,54 @@ module Aws::SSM
5410
5424
  include Aws::Structure
5411
5425
  end
5412
5426
 
5427
+ # @!attribute [rw] instance_property_filter_list
5428
+ # An array of instance property filters.
5429
+ # @return [Array<Types::InstancePropertyFilter>]
5430
+ #
5431
+ # @!attribute [rw] filters_with_operator
5432
+ # The request filters to use with the operator.
5433
+ # @return [Array<Types::InstancePropertyStringFilter>]
5434
+ #
5435
+ # @!attribute [rw] max_results
5436
+ # The maximum number of items to return for the call. The call also
5437
+ # returns a token that you can specify in a subsequent call to get the
5438
+ # next set of results.
5439
+ # @return [Integer]
5440
+ #
5441
+ # @!attribute [rw] next_token
5442
+ # The token provided by a previous request to use to return the next
5443
+ # set of properties.
5444
+ # @return [String]
5445
+ #
5446
+ # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/DescribeInstancePropertiesRequest AWS API Documentation
5447
+ #
5448
+ class DescribeInstancePropertiesRequest < Struct.new(
5449
+ :instance_property_filter_list,
5450
+ :filters_with_operator,
5451
+ :max_results,
5452
+ :next_token)
5453
+ SENSITIVE = []
5454
+ include Aws::Structure
5455
+ end
5456
+
5457
+ # @!attribute [rw] instance_properties
5458
+ # Properties for the managed instances.
5459
+ # @return [Array<Types::InstanceProperty>]
5460
+ #
5461
+ # @!attribute [rw] next_token
5462
+ # The token for the next set of properties to return. Use this token
5463
+ # to get the next set of results.
5464
+ # @return [String]
5465
+ #
5466
+ # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/DescribeInstancePropertiesResult AWS API Documentation
5467
+ #
5468
+ class DescribeInstancePropertiesResult < Struct.new(
5469
+ :instance_properties,
5470
+ :next_token)
5471
+ SENSITIVE = []
5472
+ include Aws::Structure
5473
+ end
5474
+
5413
5475
  # @!attribute [rw] deletion_id
5414
5476
  # Specify the delete inventory ID for which you want information. This
5415
5477
  # ID was returned by the `DeleteInventory` operation.
@@ -6014,15 +6076,15 @@ module Aws::SSM
6014
6076
  # [PromoteResourceShareCreatedFromPolicy][1] API operation.
6015
6077
  #
6016
6078
  # For more information about sharing parameters, see [Working with
6017
- # shared
6018
- # parameters](systems-manager/latest/userguide/parameter-store-shared-parameters.html)
6019
- # in the *Amazon Web Services Systems Manager User Guide*.
6079
+ # shared parameters][2] in the *Amazon Web Services Systems Manager
6080
+ # User Guide*.
6020
6081
  #
6021
6082
  # </note>
6022
6083
  #
6023
6084
  #
6024
6085
  #
6025
6086
  # [1]: https://docs.aws.amazon.com/ram/latest/APIReference/API_PromoteResourceShareCreatedFromPolicy.html
6087
+ # [2]: https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-shared-parameters.html
6026
6088
  # @return [Boolean]
6027
6089
  #
6028
6090
  # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/DescribeParametersRequest AWS API Documentation
@@ -8780,13 +8842,18 @@ module Aws::SSM
8780
8842
  # To query by parameter label, use `"Name": "name:label"`. To query by
8781
8843
  # parameter version, use `"Name": "name:version"`.
8782
8844
  #
8783
- # For more information about shared parameters, see [Working with
8784
- # shared parameters][1] in the *Amazon Web Services Systems Manager
8785
- # User Guide*.
8845
+ # <note markdown="1"> The results for `GetParameters` requests are listed in alphabetical
8846
+ # order in query responses.
8786
8847
  #
8848
+ # </note>
8787
8849
  #
8850
+ # For information about shared parameters, see [Working with shared
8851
+ # parameters][1] in the *Amazon Web Services Systems Manager User
8852
+ # Guide*.
8788
8853
  #
8789
- # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sharing.html
8854
+ #
8855
+ #
8856
+ # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-shared-parameters.html
8790
8857
  # @return [Array<String>]
8791
8858
  #
8792
8859
  # @!attribute [rw] with_decryption
@@ -9111,12 +9178,12 @@ module Aws::SSM
9111
9178
  #
9112
9179
  # @!attribute [rw] message
9113
9180
  # A hierarchy can have a maximum of 15 levels. For more information,
9114
- # see [Requirements and constraints for parameter names][1] in the
9115
- # *Amazon Web Services Systems Manager User Guide*.
9181
+ # see [About requirements and constraints for parameter names][1] in
9182
+ # the *Amazon Web Services Systems Manager User Guide*.
9116
9183
  #
9117
9184
  #
9118
9185
  #
9119
- # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-parameter-name-constraints.html
9186
+ # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-paramstore-su-create.html#sysman-parameter-name-constraints
9120
9187
  # @return [String]
9121
9188
  #
9122
9189
  # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/HierarchyLevelLimitExceededException AWS API Documentation
@@ -9184,7 +9251,7 @@ module Aws::SSM
9184
9251
  # @return [String]
9185
9252
  #
9186
9253
  # @!attribute [rw] instance_association_status_aggregated_count
9187
- # The number of associations for the managed node(s).
9254
+ # The number of associations for the managed nodes.
9188
9255
  # @return [Hash<String,Integer>]
9189
9256
  #
9190
9257
  # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/InstanceAggregatedAssociationOverview AWS API Documentation
@@ -9207,7 +9274,7 @@ module Aws::SSM
9207
9274
  # @return [String]
9208
9275
  #
9209
9276
  # @!attribute [rw] content
9210
- # The content of the association document for the managed node(s).
9277
+ # The content of the association document for the managed nodes.
9211
9278
  # @return [String]
9212
9279
  #
9213
9280
  # @!attribute [rw] association_version
@@ -9228,12 +9295,12 @@ module Aws::SSM
9228
9295
  # An S3 bucket where you want to store the results of this request.
9229
9296
  #
9230
9297
  # For the minimal permissions required to enable Amazon S3 output for an
9231
- # association, see [Creating associations][1] in the *Systems Manager
9232
- # User Guide*.
9298
+ # association, see [Create an association (console)][1] in the *Systems
9299
+ # Manager User Guide*.
9233
9300
  #
9234
9301
  #
9235
9302
  #
9236
- # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-state-assoc.html
9303
+ # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/state-manager-associations-creating.html#state-manager-associations-console
9237
9304
  #
9238
9305
  # @!attribute [rw] s3_location
9239
9306
  # An S3 bucket where you want to store the results of this request.
@@ -9415,12 +9482,13 @@ module Aws::SSM
9415
9482
  # the CreateActivation command. It is applied to the managed node by
9416
9483
  # specifying the Activation Code and Activation ID when you install
9417
9484
  # SSM Agent on the node, as explained in [Install SSM Agent for a
9418
- # hybrid environment (Linux)][1] and [Install SSM Agent for a hybrid
9419
- # environment (Windows)][2]. To retrieve the `Name` tag of an EC2
9420
- # instance, use the Amazon EC2 `DescribeInstances` operation. For
9421
- # information, see [DescribeInstances][3] in the *Amazon EC2 API
9422
- # Reference* or [describe-instances][4] in the *Amazon Web Services
9423
- # CLI Command Reference*.
9485
+ # hybrid and multicloud environment (Linux)][1] and [Install SSM Agent
9486
+ # for a hybrid and multicloud environment (Windows)][2]. To retrieve
9487
+ # the `Name` tag of an EC2 instance, use the Amazon EC2
9488
+ # `DescribeInstances` operation. For information, see
9489
+ # [DescribeInstances][3] in the *Amazon EC2 API Reference* or
9490
+ # [describe-instances][4] in the *Amazon Web Services CLI Command
9491
+ # Reference*.
9424
9492
  #
9425
9493
  #
9426
9494
  #
@@ -9591,7 +9659,7 @@ module Aws::SSM
9591
9659
  # the patches specified by the default patch baseline.
9592
9660
  #
9593
9661
  # For more information about the `InstallOverrideList` parameter, see
9594
- # [About the `AWS-RunPatchBaseline` ][1] SSM document in the *Amazon
9662
+ # [About the `AWS-RunPatchBaseline SSM document` ][1] in the *Amazon
9595
9663
  # Web Services Systems Manager User Guide*.
9596
9664
  #
9597
9665
  #
@@ -9801,6 +9869,200 @@ module Aws::SSM
9801
9869
  include Aws::Structure
9802
9870
  end
9803
9871
 
9872
+ # An object containing various properties of a managed node.
9873
+ #
9874
+ # @!attribute [rw] name
9875
+ # The value of the EC2 `Name` tag associated with the node. If a
9876
+ # `Name` tag hasn't been applied to the node, this value is blank.
9877
+ # @return [String]
9878
+ #
9879
+ # @!attribute [rw] instance_id
9880
+ # The ID of the managed node.
9881
+ # @return [String]
9882
+ #
9883
+ # @!attribute [rw] instance_type
9884
+ # The instance type of the managed node. For example, t3.large.
9885
+ # @return [String]
9886
+ #
9887
+ # @!attribute [rw] instance_role
9888
+ # The instance profile attached to the node. If an instance profile
9889
+ # isn't attached to the node, this value is blank.
9890
+ # @return [String]
9891
+ #
9892
+ # @!attribute [rw] key_name
9893
+ # The name of the key pair associated with the node. If a key pair
9894
+ # isnt't associated with the node, this value is blank.
9895
+ # @return [String]
9896
+ #
9897
+ # @!attribute [rw] instance_state
9898
+ # The current state of the node.
9899
+ # @return [String]
9900
+ #
9901
+ # @!attribute [rw] architecture
9902
+ # The CPU architecture of the node. For example, x86\_64.
9903
+ # @return [String]
9904
+ #
9905
+ # @!attribute [rw] ip_address
9906
+ # The public IPv4 address assigned to the node. If a public IPv4
9907
+ # address isn't assigned to the node, this value is blank.
9908
+ # @return [String]
9909
+ #
9910
+ # @!attribute [rw] launch_time
9911
+ # The timestamp for when the node was launched.
9912
+ # @return [Time]
9913
+ #
9914
+ # @!attribute [rw] ping_status
9915
+ # Connection status of the SSM Agent on the managed node.
9916
+ # @return [String]
9917
+ #
9918
+ # @!attribute [rw] last_ping_date_time
9919
+ # The date and time when the SSM Agent last pinged the Systems Manager
9920
+ # service.
9921
+ # @return [Time]
9922
+ #
9923
+ # @!attribute [rw] agent_version
9924
+ # The version of SSM Agent running on your managed node.
9925
+ # @return [String]
9926
+ #
9927
+ # @!attribute [rw] platform_type
9928
+ # The operating system platform type of the managed node. For example,
9929
+ # Windows.
9930
+ # @return [String]
9931
+ #
9932
+ # @!attribute [rw] platform_name
9933
+ # The name of the operating system platform running on your managed
9934
+ # node.
9935
+ # @return [String]
9936
+ #
9937
+ # @!attribute [rw] platform_version
9938
+ # The version of the OS platform running on your managed node.
9939
+ # @return [String]
9940
+ #
9941
+ # @!attribute [rw] activation_id
9942
+ # The activation ID created by Systems Manager when the server or
9943
+ # virtual machine (VM) was registered
9944
+ # @return [String]
9945
+ #
9946
+ # @!attribute [rw] iam_role
9947
+ # The IAM role used in the hybrid activation to register the node with
9948
+ # Systems Manager.
9949
+ # @return [String]
9950
+ #
9951
+ # @!attribute [rw] registration_date
9952
+ # The date the node was registered with Systems Manager.
9953
+ # @return [Time]
9954
+ #
9955
+ # @!attribute [rw] resource_type
9956
+ # The type of managed node.
9957
+ # @return [String]
9958
+ #
9959
+ # @!attribute [rw] computer_name
9960
+ # The fully qualified host name of the managed node.
9961
+ # @return [String]
9962
+ #
9963
+ # @!attribute [rw] association_status
9964
+ # The status of the State Manager association applied to the managed
9965
+ # node.
9966
+ # @return [String]
9967
+ #
9968
+ # @!attribute [rw] last_association_execution_date
9969
+ # The date the association was last run.
9970
+ # @return [Time]
9971
+ #
9972
+ # @!attribute [rw] last_successful_association_execution_date
9973
+ # The last date the association was successfully run.
9974
+ # @return [Time]
9975
+ #
9976
+ # @!attribute [rw] association_overview
9977
+ # Status information about the aggregated associations.
9978
+ # @return [Types::InstanceAggregatedAssociationOverview]
9979
+ #
9980
+ # @!attribute [rw] source_id
9981
+ # The ID of the source resource.
9982
+ # @return [String]
9983
+ #
9984
+ # @!attribute [rw] source_type
9985
+ # The type of the source resource.
9986
+ # @return [String]
9987
+ #
9988
+ # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/InstanceProperty AWS API Documentation
9989
+ #
9990
+ class InstanceProperty < Struct.new(
9991
+ :name,
9992
+ :instance_id,
9993
+ :instance_type,
9994
+ :instance_role,
9995
+ :key_name,
9996
+ :instance_state,
9997
+ :architecture,
9998
+ :ip_address,
9999
+ :launch_time,
10000
+ :ping_status,
10001
+ :last_ping_date_time,
10002
+ :agent_version,
10003
+ :platform_type,
10004
+ :platform_name,
10005
+ :platform_version,
10006
+ :activation_id,
10007
+ :iam_role,
10008
+ :registration_date,
10009
+ :resource_type,
10010
+ :computer_name,
10011
+ :association_status,
10012
+ :last_association_execution_date,
10013
+ :last_successful_association_execution_date,
10014
+ :association_overview,
10015
+ :source_id,
10016
+ :source_type)
10017
+ SENSITIVE = []
10018
+ include Aws::Structure
10019
+ end
10020
+
10021
+ # Describes a filter for a specific list of managed nodes. You can
10022
+ # filter node information by using tags. You specify tags by using a
10023
+ # key-value mapping.
10024
+ #
10025
+ # @!attribute [rw] key
10026
+ # The name of the filter.
10027
+ # @return [String]
10028
+ #
10029
+ # @!attribute [rw] value_set
10030
+ # The filter values.
10031
+ # @return [Array<String>]
10032
+ #
10033
+ # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/InstancePropertyFilter AWS API Documentation
10034
+ #
10035
+ class InstancePropertyFilter < Struct.new(
10036
+ :key,
10037
+ :value_set)
10038
+ SENSITIVE = []
10039
+ include Aws::Structure
10040
+ end
10041
+
10042
+ # The filters to describe or get information about your managed nodes.
10043
+ #
10044
+ # @!attribute [rw] key
10045
+ # The filter key name to describe your managed nodes.
10046
+ # @return [String]
10047
+ #
10048
+ # @!attribute [rw] values
10049
+ # The filter key name to describe your managed nodes.
10050
+ # @return [Array<String>]
10051
+ #
10052
+ # @!attribute [rw] operator
10053
+ # The operator used by the filter call.
10054
+ # @return [String]
10055
+ #
10056
+ # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/InstancePropertyStringFilter AWS API Documentation
10057
+ #
10058
+ class InstancePropertyStringFilter < Struct.new(
10059
+ :key,
10060
+ :values,
10061
+ :operator)
10062
+ SENSITIVE = []
10063
+ include Aws::Structure
10064
+ end
10065
+
9804
10066
  # An error occurred on the server side.
9805
10067
  #
9806
10068
  # @!attribute [rw] message
@@ -10112,14 +10374,14 @@ module Aws::SSM
10112
10374
  #
10113
10375
  # * You don't have permission to access the managed node.
10114
10376
  #
10115
- # * Amazon Web Services Systems Manager Agent(SSM Agent) isn't running.
10116
- # Verify that SSM Agent is running.
10377
+ # * Amazon Web Services Systems Manager Agent (SSM Agent) isn't
10378
+ # running. Verify that SSM Agent is running.
10117
10379
  #
10118
10380
  # * SSM Agent isn't registered with the SSM endpoint. Try reinstalling
10119
10381
  # SSM Agent.
10120
10382
  #
10121
- # * The managed node isn't in valid state. Valid states are: `Running`,
10122
- # `Pending`, `Stopped`, and `Stopping`. Invalid states are:
10383
+ # * The managed node isn't in a valid state. Valid states are:
10384
+ # `Running`, `Pending`, `Stopped`, and `Stopping`. Invalid states are:
10123
10385
  # `Shutting-down` and `Terminated`.
10124
10386
  #
10125
10387
  # @!attribute [rw] message
@@ -10146,6 +10408,19 @@ module Aws::SSM
10146
10408
  include Aws::Structure
10147
10409
  end
10148
10410
 
10411
+ # The specified filter value isn't valid.
10412
+ #
10413
+ # @!attribute [rw] message
10414
+ # @return [String]
10415
+ #
10416
+ # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/InvalidInstancePropertyFilterValue AWS API Documentation
10417
+ #
10418
+ class InvalidInstancePropertyFilterValue < Struct.new(
10419
+ :message)
10420
+ SENSITIVE = []
10421
+ include Aws::Structure
10422
+ end
10423
+
10149
10424
  # The specified inventory group isn't valid.
10150
10425
  #
10151
10426
  # @!attribute [rw] message
@@ -10363,13 +10638,13 @@ module Aws::SSM
10363
10638
  # The role name can't contain invalid characters. Also verify that you
10364
10639
  # specified an IAM role for notifications that includes the required
10365
10640
  # trust policy. For information about configuring the IAM role for Run
10366
- # Command notifications, see [Configuring Amazon SNS Notifications for
10367
- # Run Command][1] in the *Amazon Web Services Systems Manager User
10368
- # Guide*.
10641
+ # Command notifications, see [Monitoring Systems Manager status changes
10642
+ # using Amazon SNS notifications][1] in the *Amazon Web Services Systems
10643
+ # Manager User Guide*.
10369
10644
  #
10370
10645
  #
10371
10646
  #
10372
- # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/rc-sns-notifications.html
10647
+ # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/monitoring-sns-notifications.html
10373
10648
  #
10374
10649
  # @!attribute [rw] message
10375
10650
  # @return [String]
@@ -10892,8 +11167,8 @@ module Aws::SSM
10892
11167
 
10893
11168
  # @!attribute [rw] invalid_labels
10894
11169
  # The label doesn't meet the requirements. For information about
10895
- # parameter label requirements, see [Labeling parameters][1] in the
10896
- # *Amazon Web Services Systems Manager User Guide*.
11170
+ # parameter label requirements, see [Working with parameter labels][1]
11171
+ # in the *Amazon Web Services Systems Manager User Guide*.
10897
11172
  #
10898
11173
  #
10899
11174
  #
@@ -11454,16 +11729,16 @@ module Aws::SSM
11454
11729
  # @return [String]
11455
11730
  #
11456
11731
  # @!attribute [rw] schema_version
11457
- # The inventory schema version used by the managed node(s).
11732
+ # The inventory schema version used by the managed nodes.
11458
11733
  # @return [String]
11459
11734
  #
11460
11735
  # @!attribute [rw] capture_time
11461
11736
  # The time that inventory information was collected for the managed
11462
- # node(s).
11737
+ # nodes.
11463
11738
  # @return [String]
11464
11739
  #
11465
11740
  # @!attribute [rw] entries
11466
- # A list of inventory items on the managed node(s).
11741
+ # A list of inventory items on the managed nodes.
11467
11742
  # @return [Array<Hash<String,String>>]
11468
11743
  #
11469
11744
  # @!attribute [rw] next_token
@@ -12640,7 +12915,7 @@ module Aws::SSM
12640
12915
  # The Amazon Web Services users that should no longer have access to
12641
12916
  # the document. The Amazon Web Services user can either be a group of
12642
12917
  # account IDs or *All*. This action has a higher priority than
12643
- # *AccountIdsToAdd*. If you specify an ID to add and the same ID to
12918
+ # `AccountIdsToAdd`. If you specify an ID to add and the same ID to
12644
12919
  # remove, the system removes access to the document.
12645
12920
  # @return [Array<String>]
12646
12921
  #
@@ -12850,8 +13125,8 @@ module Aws::SSM
12850
13125
  # Services resource, OpsCenter aggregates information from Config,
12851
13126
  # CloudTrail logs, and EventBridge, so you don't have to navigate
12852
13127
  # across multiple console pages during your investigation. For more
12853
- # information, see [OpsCenter][1] in the *Amazon Web Services Systems
12854
- # Manager User Guide*.
13128
+ # information, see [Amazon Web Services Systems Manager OpsCenter][1] in
13129
+ # the *Amazon Web Services Systems Manager User Guide*.
12855
13130
  #
12856
13131
  #
12857
13132
  #
@@ -14760,7 +15035,7 @@ module Aws::SSM
14760
15035
  # A summary of the call execution that includes an execution ID, the
14761
15036
  # type of execution (for example, `Command`), and the date/time of the
14762
15037
  # execution using a datetime object that is saved in the following
14763
- # format: yyyy-MM-dd'T'HH:mm:ss'Z'.
15038
+ # format: `yyyy-MM-dd'T'HH:mm:ss'Z'`
14764
15039
  # @return [Types::ComplianceExecutionSummary]
14765
15040
  #
14766
15041
  # @!attribute [rw] items
@@ -14991,8 +15266,8 @@ module Aws::SSM
14991
15266
  # configured to use parameter policies. You can create a maximum of
14992
15267
  # 100,000 advanced parameters for each Region in an Amazon Web
14993
15268
  # Services account. Advanced parameters incur a charge. For more
14994
- # information, see [Standard and advanced parameter tiers][1] in the
14995
- # *Amazon Web Services Systems Manager User Guide*.
15269
+ # information, see [Managing parameter tiers][1] in the *Amazon Web
15270
+ # Services Systems Manager User Guide*.
14996
15271
  #
14997
15272
  # You can change a standard parameter to an advanced parameter any
14998
15273
  # time. But you can't revert an advanced parameter to a standard
@@ -15052,7 +15327,7 @@ module Aws::SSM
15052
15327
  #
15053
15328
  #
15054
15329
  # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-advanced-parameters.html
15055
- # [2]: https://docs.aws.amazon.com/systems-manager/latest/userguide/ps-default-tier.html
15330
+ # [2]: https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-advanced-parameters.html#ps-default-tier
15056
15331
  # @return [String]
15057
15332
  #
15058
15333
  # @!attribute [rw] policies
@@ -15117,7 +15392,7 @@ module Aws::SSM
15117
15392
  # created successfully, see [Setting up notifications or trigger
15118
15393
  # actions based on Parameter Store events][1]. For more information
15119
15394
  # about AMI format validation , see [Native parameter support for
15120
- # Amazon Machine Image (AMI) IDs][2].
15395
+ # Amazon Machine Image IDs][2].
15121
15396
  #
15122
15397
  # </note>
15123
15398
  #
@@ -15422,22 +15697,21 @@ module Aws::SSM
15422
15697
  # The Amazon Resource Name (ARN) of the IAM service role for Amazon
15423
15698
  # Web Services Systems Manager to assume when running a maintenance
15424
15699
  # window task. If you do not specify a service role ARN, Systems
15425
- # Manager uses your account's service-linked role. If no
15426
- # service-linked role for Systems Manager exists in your account, it
15427
- # is created when you run `RegisterTaskWithMaintenanceWindow`.
15428
- #
15429
- # For more information, see the following topics in the in the *Amazon
15430
- # Web Services Systems Manager User Guide*:
15431
- #
15432
- # * [Using service-linked roles for Systems Manager][1]
15433
- #
15434
- # * [Should I use a service-linked role or a custom service role to
15435
- # run maintenance window tasks? ][2]
15700
+ # Manager uses a service-linked role in your account. If no
15701
+ # appropriate service-linked role for Systems Manager exists in your
15702
+ # account, it is created when you run
15703
+ # `RegisterTaskWithMaintenanceWindow`.
15704
+ #
15705
+ # However, for an improved security posture, we strongly recommend
15706
+ # creating a custom policy and custom service role for running your
15707
+ # maintenance window tasks. The policy can be crafted to provide only
15708
+ # the permissions needed for your particular maintenance window tasks.
15709
+ # For more information, see [Setting up maintenance windows][1] in the
15710
+ # in the *Amazon Web Services Systems Manager User Guide*.
15436
15711
  #
15437
15712
  #
15438
15713
  #
15439
- # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/using-service-linked-roles.html#slr-permissions
15440
- # [2]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-maintenance-permissions.html#maintenance-window-tasks-service-role
15714
+ # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-maintenance-permissions.html
15441
15715
  # @return [String]
15442
15716
  #
15443
15717
  # @!attribute [rw] task_type
@@ -16081,13 +16355,13 @@ module Aws::SSM
16081
16355
  # Organizations options, then Systems Manager automatically enables
16082
16356
  # all OpsData sources in the selected Amazon Web Services Regions for
16083
16357
  # all Amazon Web Services accounts in your organization (or in the
16084
- # selected organization units). For more information, see [About
16085
- # multiple account and Region resource data syncs][1] in the *Amazon
16086
- # Web Services Systems Manager User Guide*.
16358
+ # selected organization units). For more information, see [Setting up
16359
+ # Systems Manager Explorer to display data from multiple accounts and
16360
+ # Regions][1] in the *Amazon Web Services Systems Manager User Guide*.
16087
16361
  #
16088
16362
  #
16089
16363
  #
16090
- # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/Explorer-resouce-data-sync-multiple-accounts-and-regions.html
16364
+ # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/Explorer-resource-data-sync.html
16091
16365
  # @return [Boolean]
16092
16366
  #
16093
16367
  # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/ResourceDataSyncSource AWS API Documentation
@@ -16160,13 +16434,13 @@ module Aws::SSM
16160
16434
  # Organizations options, then Systems Manager automatically enables
16161
16435
  # all OpsData sources in the selected Amazon Web Services Regions for
16162
16436
  # all Amazon Web Services accounts in your organization (or in the
16163
- # selected organization units). For more information, see [About
16164
- # multiple account and Region resource data syncs][1] in the *Amazon
16165
- # Web Services Systems Manager User Guide*.
16437
+ # selected organization units). For more information, see [Setting up
16438
+ # Systems Manager Explorer to display data from multiple accounts and
16439
+ # Regions][1] in the *Amazon Web Services Systems Manager User Guide*.
16166
16440
  #
16167
16441
  #
16168
16442
  #
16169
- # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/Explorer-resouce-data-sync-multiple-accounts-and-regions.html
16443
+ # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/Explorer-resource-data-sync.html
16170
16444
  # @return [Boolean]
16171
16445
  #
16172
16446
  # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/ResourceDataSyncSourceWithState AWS API Documentation
@@ -16583,9 +16857,8 @@ module Aws::SSM
16583
16857
  # identify the managed nodes to send commands to, you can a send
16584
16858
  # command to tens, hundreds, or thousands of nodes at once.
16585
16859
  #
16586
- # For more information about how to use targets, see [Using targets
16587
- # and rate controls to send commands to a fleet][1] in the *Amazon Web
16588
- # Services Systems Manager User Guide*.
16860
+ # For more information about how to use targets, see [Run commands at
16861
+ # scale][1] in the *Amazon Web Services Systems Manager User Guide*.
16589
16862
  #
16590
16863
  #
16591
16864
  #
@@ -16603,9 +16876,8 @@ module Aws::SSM
16603
16876
  # To send a command to a smaller number of managed nodes, you can use
16604
16877
  # the `InstanceIds` option instead.
16605
16878
  #
16606
- # For more information about how to use targets, see [Sending commands
16607
- # to a fleet][1] in the *Amazon Web Services Systems Manager User
16608
- # Guide*.
16879
+ # For more information about how to use targets, see [Run commands at
16880
+ # scale][1] in the *Amazon Web Services Systems Manager User Guide*.
16609
16881
  #
16610
16882
  #
16611
16883
  #
@@ -16617,7 +16889,7 @@ module Aws::SSM
16617
16889
  # document) to run. This can be a public document or a custom
16618
16890
  # document. To run a shared document belonging to another account,
16619
16891
  # specify the document Amazon Resource Name (ARN). For more
16620
- # information about how to use shared documents, see [Using shared SSM
16892
+ # information about how to use shared documents, see [Sharing SSM
16621
16893
  # documents][1] in the *Amazon Web Services Systems Manager User
16622
16894
  # Guide*.
16623
16895
  #
@@ -17084,12 +17356,12 @@ module Aws::SSM
17084
17356
  # The name of the SSM document to run. This can be a public document
17085
17357
  # or a custom document. To run a shared document belonging to another
17086
17358
  # account, specify the document ARN. For more information about how to
17087
- # use shared documents, see [Using shared SSM documents][1] in the
17088
- # *Amazon Web Services Systems Manager User Guide*.
17359
+ # use shared documents, see [Sharing SSM documents][1] in the *Amazon
17360
+ # Web Services Systems Manager User Guide*.
17089
17361
  #
17090
17362
  #
17091
17363
  #
17092
- # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/ssm-using-shared.html
17364
+ # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/documents-ssm-sharing.html
17093
17365
  # @return [String]
17094
17366
  #
17095
17367
  # @!attribute [rw] document_version
@@ -17663,54 +17935,55 @@ module Aws::SSM
17663
17935
  #
17664
17936
  # Supported formats include the following.
17665
17937
  #
17666
- # * `Key=InstanceIds,Values=<instance-id-1>,<instance-id-2>,<instance-id-3>`
17938
+ # **For all Systems Manager capabilities:**
17667
17939
  #
17668
- # * `Key=tag:<my-tag-key>,Values=<my-tag-value-1>,<my-tag-value-2>`
17940
+ # * `Key=tag-key,Values=tag-value-1,tag-value-2`
17669
17941
  #
17670
- # * `Key=tag-key,Values=<my-tag-key-1>,<my-tag-key-2>`
17942
+ # ^
17671
17943
  #
17672
- # * **Run Command and Maintenance window targets only**:
17673
- # `Key=resource-groups:Name,Values=<resource-group-name>`
17944
+ # **For Automation and Change Manager:**
17674
17945
  #
17675
- # * **Maintenance window targets only**:
17676
- # `Key=resource-groups:ResourceTypeFilters,Values=<resource-type-1>,<resource-type-2>`
17946
+ # * `Key=tag:tag-key,Values=tag-value`
17677
17947
  #
17678
- # * **Automation targets only**:
17679
- # `Key=ResourceGroup;Values=<resource-group-name>`
17948
+ # * `Key=ResourceGroup,Values=resource-group-name`
17680
17949
  #
17681
- # For example:
17950
+ # * `Key=ParameterValues,Values=value-1,value-2,value-3`
17682
17951
  #
17683
- # * `Key=InstanceIds,Values=i-02573cafcfEXAMPLE,i-0471e04240EXAMPLE,i-07782c72faEXAMPLE`
17952
+ # * To target all instances in the Amazon Web Services Region:
17684
17953
  #
17685
- # * `Key=tag:CostCenter,Values=CostCenter1,CostCenter2,CostCenter3`
17954
+ # * `Key=AWS::EC2::Instance,Values=*`
17686
17955
  #
17687
- # * `Key=tag-key,Values=Name,Instance-Type,CostCenter`
17956
+ # * `Key=InstanceIds,Values=*`
17688
17957
  #
17689
- # * **Run Command and Maintenance window targets only**:
17690
- # `Key=resource-groups:Name,Values=ProductionResourceGroup`
17958
+ # **For Run Command and Maintenance Windows:**
17691
17959
  #
17692
- # This example demonstrates how to target all resources in the
17693
- # resource group **ProductionResourceGroup** in your maintenance
17694
- # window.
17960
+ # * `Key=InstanceIds,Values=instance-id-1,instance-id-2,instance-id-3`
17961
+ #
17962
+ # * `Key=tag:tag-key,Values=tag-value-1,tag-value-2`
17695
17963
  #
17696
- # * **Maintenance window targets only**:
17697
- # `Key=resource-groups:ResourceTypeFilters,Values=AWS::EC2::INSTANCE,AWS::EC2::VPC`
17964
+ # * `Key=resource-groups:Name,Values=resource-group-name`
17698
17965
  #
17699
- # This example demonstrates how to target only Amazon Elastic Compute
17700
- # Cloud (Amazon EC2) instances and VPCs in your maintenance window.
17966
+ # * Additionally, Maintenance Windows support targeting resource types:
17701
17967
  #
17702
- # * **Automation targets only**:
17703
- # `Key=ResourceGroup,Values=MyResourceGroup`
17968
+ # * `Key=resource-groups:ResourceTypeFilters,Values=resource-type-1,resource-type-2`
17969
+ #
17970
+ # ^
17704
17971
  #
17705
- # * **State Manager association targets only**:
17706
- # `Key=InstanceIds,Values=*`
17972
+ # **For State Manager:**
17707
17973
  #
17708
- # This example demonstrates how to target all managed instances in the
17709
- # Amazon Web Services Region where the association was created.
17974
+ # * `Key=InstanceIds,Values=instance-id-1,instance-id-2,instance-id-3`
17975
+ #
17976
+ # * `Key=tag:tag-key,Values=tag-value-1,tag-value-2`
17977
+ #
17978
+ # * To target all instances in the Amazon Web Services Region:
17979
+ #
17980
+ # * `Key=InstanceIds,Values=*`
17981
+ #
17982
+ # ^
17710
17983
  #
17711
17984
  # For more information about how to send commands that target managed
17712
- # nodes using `Key,Value` parameters, see [Targeting multiple
17713
- # instances][2] in the *Amazon Web Services Systems Manager User Guide*.
17985
+ # nodes using `Key,Value` parameters, see [Targeting multiple managed
17986
+ # nodes][2] in the *Amazon Web Services Systems Manager User Guide*.
17714
17987
  #
17715
17988
  #
17716
17989
  #
@@ -17948,8 +18221,9 @@ module Aws::SSM
17948
18221
  # Patching for applications released by Microsoft is only available on
17949
18222
  # EC2 instances and advanced instances. To patch applications released
17950
18223
  # by Microsoft on on-premises servers and VMs, you must enable advanced
17951
- # instances. For more information, see [Enabling the advanced-instances
17952
- # tier][1] in the *Amazon Web Services Systems Manager User Guide*.
18224
+ # instances. For more information, see [Turning on the
18225
+ # advanced-instances tier][1] in the *Amazon Web Services Systems
18226
+ # Manager User Guide*.
17953
18227
  #
17954
18228
  #
17955
18229
  #
@@ -18028,8 +18302,8 @@ module Aws::SSM
18028
18302
  end
18029
18303
 
18030
18304
  # The document doesn't support the platform type of the given managed
18031
- # node ID(s). For example, you sent an document for a Windows managed
18032
- # node to a Linux node.
18305
+ # node IDs. For example, you sent an document for a Windows managed node
18306
+ # to a Linux node.
18033
18307
  #
18034
18308
  # @!attribute [rw] message
18035
18309
  # @return [String]
@@ -18492,6 +18766,11 @@ module Aws::SSM
18492
18766
  # the maintenance window to become active. `StartDate` allows you to
18493
18767
  # delay activation of the maintenance window until the specified
18494
18768
  # future date.
18769
+ #
18770
+ # <note markdown="1"> When using a rate schedule, if you provide a start date that occurs
18771
+ # in the past, the current date and time are used as the start date.
18772
+ #
18773
+ # </note>
18495
18774
  # @return [String]
18496
18775
  #
18497
18776
  # @!attribute [rw] end_date
@@ -18780,22 +19059,21 @@ module Aws::SSM
18780
19059
  # The Amazon Resource Name (ARN) of the IAM service role for Amazon
18781
19060
  # Web Services Systems Manager to assume when running a maintenance
18782
19061
  # window task. If you do not specify a service role ARN, Systems
18783
- # Manager uses your account's service-linked role. If no
18784
- # service-linked role for Systems Manager exists in your account, it
18785
- # is created when you run `RegisterTaskWithMaintenanceWindow`.
18786
- #
18787
- # For more information, see the following topics in the in the *Amazon
18788
- # Web Services Systems Manager User Guide*:
18789
- #
18790
- # * [Using service-linked roles for Systems Manager][1]
18791
- #
18792
- # * [Should I use a service-linked role or a custom service role to
18793
- # run maintenance window tasks? ][2]
19062
+ # Manager uses a service-linked role in your account. If no
19063
+ # appropriate service-linked role for Systems Manager exists in your
19064
+ # account, it is created when you run
19065
+ # `RegisterTaskWithMaintenanceWindow`.
19066
+ #
19067
+ # However, for an improved security posture, we strongly recommend
19068
+ # creating a custom policy and custom service role for running your
19069
+ # maintenance window tasks. The policy can be crafted to provide only
19070
+ # the permissions needed for your particular maintenance window tasks.
19071
+ # For more information, see [Setting up maintenance windows][1] in the
19072
+ # in the *Amazon Web Services Systems Manager User Guide*.
18794
19073
  #
18795
19074
  #
18796
19075
  #
18797
- # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/using-service-linked-roles.html#slr-permissions
18798
- # [2]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-maintenance-permissions.html#maintenance-window-tasks-service-role
19076
+ # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-maintenance-permissions.html
18799
19077
  # @return [String]
18800
19078
  #
18801
19079
  # @!attribute [rw] task_parameters
@@ -19075,8 +19353,9 @@ module Aws::SSM
19075
19353
  # want to assign to the managed node. This IAM role must provide
19076
19354
  # AssumeRole permissions for the Amazon Web Services Systems Manager
19077
19355
  # service principal `ssm.amazonaws.com`. For more information, see
19078
- # [Create an IAM service role for a hybrid environment][1] in the
19079
- # *Amazon Web Services Systems Manager User Guide*.
19356
+ # [Create an IAM service role for a hybrid and multicloud
19357
+ # environment][1] in the *Amazon Web Services Systems Manager User
19358
+ # Guide*.
19080
19359
  #
19081
19360
  # <note markdown="1"> You can't specify an IAM service-linked role for this parameter.
19082
19361
  # You must create a unique role.
@@ -19339,12 +19618,13 @@ module Aws::SSM
19339
19618
  # baseline, and its status is reported as `InstalledOther`. This is
19340
19619
  # the default action if no option is specified.
19341
19620
  #
19342
- # * <b> <code>BLOCK</code> </b>: Packages in the `RejectedPatches`
19343
- # list, and packages that include them as dependencies, aren't
19344
- # installed under any circumstances. If a package was installed
19345
- # before it was added to the `Rejected` patches list, it is
19346
- # considered non-compliant with the patch baseline, and its status
19347
- # is reported as `InstalledRejected`.
19621
+ # * **BLOCK**: Packages in the **Rejected patches** list, and packages
19622
+ # that include them as dependencies, aren't installed by Patch
19623
+ # Manager under any circumstances. If a package was installed before
19624
+ # it was added to the **Rejected patches** list, or is installed
19625
+ # outside of Patch Manager afterward, it's considered noncompliant
19626
+ # with the patch baseline and its status is reported as
19627
+ # *InstalledRejected*.
19348
19628
  # @return [String]
19349
19629
  #
19350
19630
  # @!attribute [rw] description