aws-sdk-ssm 1.26.0 → 1.27.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 52a71888acd8ecf52a83b5fbeb6655fc399b46cf
-  data.tar.gz: 2339ea6303368a8633f8872d32bccef645f84459
+  metadata.gz: 2791f0879e0708d2efece83454d826f60becf76e
+  data.tar.gz: 1582c96e7e8417cb7c55a33f3822a71636a7d108
 SHA512:
-  metadata.gz: bfcb444b15103be29f82fce1a9afcd4026b68099169fc5b51400aca8bf8680f2d805edf368dd3354a5634ed4cb34590bb4078ddb3f5d15a6fc8ccfe19b049e9a
-  data.tar.gz: 44443da8bbcf5deb7ba791329d9ed2a0a690f017c4f909de0149b64f707fd9f1657e99af8c1367711e4d87e66308e5f78e6f888c71583c74434654d1e1a9e500
+  metadata.gz: b3e4d906e55cb9cb1b393a5a4504adfa830ffbdf7682a1c7dfab045db47493782ce151f85abe780abda251fab9674e91a6bab312869207d2f3a17c4678023619
+  data.tar.gz: 16f35ddb8a035d2596d8eb2c068326e56fbf77dc7a5d4d3fcc65ce608327dbb7dcb692754a0860be93a738464b7bf05ad07eab644774a4c6f7fba616720b170c

data/lib/aws-sdk-ssm.rb

@@ -42,6 +42,6 @@ require_relative 'aws-sdk-ssm/customizations'
 # @service
 module Aws::SSM
 
-  GEM_VERSION = '1.26.0'
+  GEM_VERSION = '1.27.0'
 
 end

data/lib/aws-sdk-ssm/client.rb

@@ -801,6 +801,22 @@ module Aws::SSM
     #
     #   [1]: http://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-approved-rejected-package-name-formats.html
     #
+    # @option params [String] :rejected_patches_action
+    #   The action for Patch Manager to take on patches included in the
+    #   RejectedPackages list.
+    #
+    #   * **ALLOW\_AS\_DEPENDENCY**\: A package in the Rejected patches list
+    #     is installed only if it is a dependency of another package. It is
+    #     considered compliant with the patch baseline, and its status is
+    #     reported as *InstalledOther*. This is the default action if no
+    #     option is specified.
+    #
+    #   * **BLOCK**\: Packages in the RejectedPatches list, and packages that
+    #     include them as dependencies, are not installed under any
+    #     circumstances. If a package was installed before it was added to the
+    #     Rejected patches list, it is considered non-compliant with the patch
+    #     baseline, and its status is reported as *InstalledRejected*.
+    #
     # @option params [String] :description
     #   A description of the patch baseline.
     #
@@ -853,6 +869,7 @@ module Aws::SSM
     #     approved_patches_compliance_level: "CRITICAL", # accepts CRITICAL, HIGH, MEDIUM, LOW, INFORMATIONAL, UNSPECIFIED
     #     approved_patches_enable_non_security: false,
     #     rejected_patches: ["PatchId"],
+    #     rejected_patches_action: "ALLOW_AS_DEPENDENCY", # accepts ALLOW_AS_DEPENDENCY, BLOCK
     #     description: "BaselineDescription",
     #     sources: [
     #       {
@@ -2233,9 +2250,11 @@ module Aws::SSM
     #   resp.instance_patch_states[0].patch_group #=> String
     #   resp.instance_patch_states[0].baseline_id #=> String
     #   resp.instance_patch_states[0].snapshot_id #=> String
+    #   resp.instance_patch_states[0].install_override_list #=> String
     #   resp.instance_patch_states[0].owner_information #=> String
     #   resp.instance_patch_states[0].installed_count #=> Integer
     #   resp.instance_patch_states[0].installed_other_count #=> Integer
+    #   resp.instance_patch_states[0].installed_rejected_count #=> Integer
     #   resp.instance_patch_states[0].missing_count #=> Integer
     #   resp.instance_patch_states[0].failed_count #=> Integer
     #   resp.instance_patch_states[0].not_applicable_count #=> Integer
@@ -2303,9 +2322,11 @@ module Aws::SSM
     #   resp.instance_patch_states[0].patch_group #=> String
     #   resp.instance_patch_states[0].baseline_id #=> String
     #   resp.instance_patch_states[0].snapshot_id #=> String
+    #   resp.instance_patch_states[0].install_override_list #=> String
     #   resp.instance_patch_states[0].owner_information #=> String
     #   resp.instance_patch_states[0].installed_count #=> Integer
     #   resp.instance_patch_states[0].installed_other_count #=> Integer
+    #   resp.instance_patch_states[0].installed_rejected_count #=> Integer
     #   resp.instance_patch_states[0].missing_count #=> Integer
     #   resp.instance_patch_states[0].failed_count #=> Integer
     #   resp.instance_patch_states[0].not_applicable_count #=> Integer
@@ -2371,7 +2392,7 @@ module Aws::SSM
     #   resp.patches[0].kb_id #=> String
     #   resp.patches[0].classification #=> String
     #   resp.patches[0].severity #=> String
-    #   resp.patches[0].state #=> String, one of "INSTALLED", "INSTALLED_OTHER", "MISSING", "NOT_APPLICABLE", "FAILED"
+    #   resp.patches[0].state #=> String, one of "INSTALLED", "INSTALLED_OTHER", "INSTALLED_REJECTED", "MISSING", "NOT_APPLICABLE", "FAILED"
     #   resp.patches[0].installed_time #=> Time
     #   resp.next_token #=> String
     #
@@ -2962,6 +2983,7 @@ module Aws::SSM
     #   * {Types::DescribePatchGroupStateResult#instances #instances} => Integer
     #   * {Types::DescribePatchGroupStateResult#instances_with_installed_patches #instances_with_installed_patches} => Integer
     #   * {Types::DescribePatchGroupStateResult#instances_with_installed_other_patches #instances_with_installed_other_patches} => Integer
+    #   * {Types::DescribePatchGroupStateResult#instances_with_installed_rejected_patches #instances_with_installed_rejected_patches} => Integer
     #   * {Types::DescribePatchGroupStateResult#instances_with_missing_patches #instances_with_missing_patches} => Integer
     #   * {Types::DescribePatchGroupStateResult#instances_with_failed_patches #instances_with_failed_patches} => Integer
     #   * {Types::DescribePatchGroupStateResult#instances_with_not_applicable_patches #instances_with_not_applicable_patches} => Integer
@@ -2977,6 +2999,7 @@ module Aws::SSM
     #   resp.instances #=> Integer
     #   resp.instances_with_installed_patches #=> Integer
     #   resp.instances_with_installed_other_patches #=> Integer
+    #   resp.instances_with_installed_rejected_patches #=> Integer
     #   resp.instances_with_missing_patches #=> Integer
     #   resp.instances_with_failed_patches #=> Integer
     #   resp.instances_with_not_applicable_patches #=> Integer
@@ -3046,7 +3069,7 @@ module Aws::SSM
     #
     # @option params [required, String] :state
     #   The session status to retrieve a list of sessions for. For example,
-    #   "active".
+    #   "Active".
     #
     # @option params [Integer] :max_results
     #   The maximum number of items to return for this call. The call also
@@ -4130,6 +4153,7 @@ module Aws::SSM
     #   * {Types::GetPatchBaselineResult#approved_patches_compliance_level #approved_patches_compliance_level} => String
     #   * {Types::GetPatchBaselineResult#approved_patches_enable_non_security #approved_patches_enable_non_security} => Boolean
     #   * {Types::GetPatchBaselineResult#rejected_patches #rejected_patches} => Array<String>
+    #   * {Types::GetPatchBaselineResult#rejected_patches_action #rejected_patches_action} => String
     #   * {Types::GetPatchBaselineResult#patch_groups #patch_groups} => Array<String>
     #   * {Types::GetPatchBaselineResult#created_date #created_date} => Time
     #   * {Types::GetPatchBaselineResult#modified_date #modified_date} => Time
@@ -4165,6 +4189,7 @@ module Aws::SSM
     #   resp.approved_patches_enable_non_security #=> Boolean
     #   resp.rejected_patches #=> Array
     #   resp.rejected_patches[0] #=> String
+    #   resp.rejected_patches_action #=> String, one of "ALLOW_AS_DEPENDENCY", "BLOCK"
     #   resp.patch_groups #=> Array
     #   resp.patch_groups[0] #=> String
     #   resp.created_date #=> Time
@@ -7071,6 +7096,22 @@ module Aws::SSM
     #
     #   [1]: http://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-approved-rejected-package-name-formats.html
     #
+    # @option params [String] :rejected_patches_action
+    #   The action for Patch Manager to take on patches included in the
+    #   RejectedPackages list.
+    #
+    #   * **ALLOW\_AS\_DEPENDENCY**\: A package in the Rejected patches list
+    #     is installed only if it is a dependency of another package. It is
+    #     considered compliant with the patch baseline, and its status is
+    #     reported as *InstalledOther*. This is the default action if no
+    #     option is specified.
+    #
+    #   * **BLOCK**\: Packages in the RejectedPatches list, and packages that
+    #     include them as dependencies, are not installed under any
+    #     circumstances. If a package was installed before it was added to the
+    #     Rejected patches list, it is considered non-compliant with the patch
+    #     baseline, and its status is reported as *InstalledRejected*.
+    #
     # @option params [String] :description
     #   A description of the patch baseline.
     #
@@ -7095,6 +7136,7 @@ module Aws::SSM
     #   * {Types::UpdatePatchBaselineResult#approved_patches_compliance_level #approved_patches_compliance_level} => String
     #   * {Types::UpdatePatchBaselineResult#approved_patches_enable_non_security #approved_patches_enable_non_security} => Boolean
     #   * {Types::UpdatePatchBaselineResult#rejected_patches #rejected_patches} => Array<String>
+    #   * {Types::UpdatePatchBaselineResult#rejected_patches_action #rejected_patches_action} => String
     #   * {Types::UpdatePatchBaselineResult#created_date #created_date} => Time
     #   * {Types::UpdatePatchBaselineResult#modified_date #modified_date} => Time
     #   * {Types::UpdatePatchBaselineResult#description #description} => String
@@ -7134,6 +7176,7 @@ module Aws::SSM
     #     approved_patches_compliance_level: "CRITICAL", # accepts CRITICAL, HIGH, MEDIUM, LOW, INFORMATIONAL, UNSPECIFIED
     #     approved_patches_enable_non_security: false,
     #     rejected_patches: ["PatchId"],
+    #     rejected_patches_action: "ALLOW_AS_DEPENDENCY", # accepts ALLOW_AS_DEPENDENCY, BLOCK
     #     description: "BaselineDescription",
     #     sources: [
     #       {
@@ -7168,6 +7211,7 @@ module Aws::SSM
     #   resp.approved_patches_enable_non_security #=> Boolean
     #   resp.rejected_patches #=> Array
     #   resp.rejected_patches[0] #=> String
+    #   resp.rejected_patches_action #=> String, one of "ALLOW_AS_DEPENDENCY", "BLOCK"
     #   resp.created_date #=> Time
     #   resp.modified_date #=> Time
     #   resp.description #=> String
@@ -7199,7 +7243,7 @@ module Aws::SSM
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-ssm'
-      context[:gem_version] = '1.26.0'
+      context[:gem_version] = '1.27.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-ssm/client_api.rb

@@ -356,6 +356,7 @@ module Aws::SSM
     IamRole = Shapes::StringShape.new(name: 'IamRole')
     IdempotencyToken = Shapes::StringShape.new(name: 'IdempotencyToken')
     IdempotentParameterMismatch = Shapes::StructureShape.new(name: 'IdempotentParameterMismatch')
+    InstallOverrideList = Shapes::StringShape.new(name: 'InstallOverrideList')
     InstanceAggregatedAssociationOverview = Shapes::StructureShape.new(name: 'InstanceAggregatedAssociationOverview')
     InstanceAssociation = Shapes::StructureShape.new(name: 'InstanceAssociation')
     InstanceAssociationExecutionSummary = Shapes::StringShape.new(name: 'InstanceAssociationExecutionSummary')
@@ -388,6 +389,7 @@ module Aws::SSM
     InstancePatchStateOperatorType = Shapes::StringShape.new(name: 'InstancePatchStateOperatorType')
     InstancePatchStatesList = Shapes::ListShape.new(name: 'InstancePatchStatesList')
     InstanceTagName = Shapes::StringShape.new(name: 'InstanceTagName')
+    InstancesCount = Shapes::IntegerShape.new(name: 'InstancesCount')
     Integer = Shapes::IntegerShape.new(name: 'Integer')
     InternalServerError = Shapes::StructureShape.new(name: 'InternalServerError')
     InvalidActivation = Shapes::StructureShape.new(name: 'InvalidActivation')
@@ -635,6 +637,7 @@ module Aws::SSM
     ParametersFilterValue = Shapes::StringShape.new(name: 'ParametersFilterValue')
     ParametersFilterValueList = Shapes::ListShape.new(name: 'ParametersFilterValueList')
     Patch = Shapes::StructureShape.new(name: 'Patch')
+    PatchAction = Shapes::StringShape.new(name: 'PatchAction')
     PatchBaselineIdentity = Shapes::StructureShape.new(name: 'PatchBaselineIdentity')
     PatchBaselineIdentityList = Shapes::ListShape.new(name: 'PatchBaselineIdentityList')
     PatchBaselineMaxResults = Shapes::IntegerShape.new(name: 'PatchBaselineMaxResults')
@@ -662,6 +665,7 @@ module Aws::SSM
     PatchIdList = Shapes::ListShape.new(name: 'PatchIdList')
     PatchInstalledCount = Shapes::IntegerShape.new(name: 'PatchInstalledCount')
     PatchInstalledOtherCount = Shapes::IntegerShape.new(name: 'PatchInstalledOtherCount')
+    PatchInstalledRejectedCount = Shapes::IntegerShape.new(name: 'PatchInstalledRejectedCount')
     PatchKbNumber = Shapes::StringShape.new(name: 'PatchKbNumber')
     PatchLanguage = Shapes::StringShape.new(name: 'PatchLanguage')
     PatchList = Shapes::ListShape.new(name: 'PatchList')
@@ -1260,6 +1264,7 @@ module Aws::SSM
     CreatePatchBaselineRequest.add_member(:approved_patches_compliance_level, Shapes::ShapeRef.new(shape: PatchComplianceLevel, location_name: "ApprovedPatchesComplianceLevel"))
     CreatePatchBaselineRequest.add_member(:approved_patches_enable_non_security, Shapes::ShapeRef.new(shape: Boolean, location_name: "ApprovedPatchesEnableNonSecurity", metadata: {"box"=>true}))
     CreatePatchBaselineRequest.add_member(:rejected_patches, Shapes::ShapeRef.new(shape: PatchIdList, location_name: "RejectedPatches"))
+    CreatePatchBaselineRequest.add_member(:rejected_patches_action, Shapes::ShapeRef.new(shape: PatchAction, location_name: "RejectedPatchesAction"))
     CreatePatchBaselineRequest.add_member(:description, Shapes::ShapeRef.new(shape: BaselineDescription, location_name: "Description"))
     CreatePatchBaselineRequest.add_member(:sources, Shapes::ShapeRef.new(shape: PatchSourceList, location_name: "Sources"))
     CreatePatchBaselineRequest.add_member(:client_token, Shapes::ShapeRef.new(shape: ClientToken, location_name: "ClientToken", metadata: {"idempotencyToken"=>true}))
@@ -1609,6 +1614,7 @@ module Aws::SSM
     DescribePatchGroupStateResult.add_member(:instances, Shapes::ShapeRef.new(shape: Integer, location_name: "Instances"))
     DescribePatchGroupStateResult.add_member(:instances_with_installed_patches, Shapes::ShapeRef.new(shape: Integer, location_name: "InstancesWithInstalledPatches"))
     DescribePatchGroupStateResult.add_member(:instances_with_installed_other_patches, Shapes::ShapeRef.new(shape: Integer, location_name: "InstancesWithInstalledOtherPatches"))
+    DescribePatchGroupStateResult.add_member(:instances_with_installed_rejected_patches, Shapes::ShapeRef.new(shape: InstancesCount, location_name: "InstancesWithInstalledRejectedPatches", metadata: {"box"=>true}))
     DescribePatchGroupStateResult.add_member(:instances_with_missing_patches, Shapes::ShapeRef.new(shape: Integer, location_name: "InstancesWithMissingPatches"))
     DescribePatchGroupStateResult.add_member(:instances_with_failed_patches, Shapes::ShapeRef.new(shape: Integer, location_name: "InstancesWithFailedPatches"))
     DescribePatchGroupStateResult.add_member(:instances_with_not_applicable_patches, Shapes::ShapeRef.new(shape: Integer, location_name: "InstancesWithNotApplicablePatches"))
@@ -1949,6 +1955,7 @@ module Aws::SSM
     GetPatchBaselineResult.add_member(:approved_patches_compliance_level, Shapes::ShapeRef.new(shape: PatchComplianceLevel, location_name: "ApprovedPatchesComplianceLevel"))
     GetPatchBaselineResult.add_member(:approved_patches_enable_non_security, Shapes::ShapeRef.new(shape: Boolean, location_name: "ApprovedPatchesEnableNonSecurity", metadata: {"box"=>true}))
     GetPatchBaselineResult.add_member(:rejected_patches, Shapes::ShapeRef.new(shape: PatchIdList, location_name: "RejectedPatches"))
+    GetPatchBaselineResult.add_member(:rejected_patches_action, Shapes::ShapeRef.new(shape: PatchAction, location_name: "RejectedPatchesAction"))
     GetPatchBaselineResult.add_member(:patch_groups, Shapes::ShapeRef.new(shape: PatchGroupList, location_name: "PatchGroups"))
     GetPatchBaselineResult.add_member(:created_date, Shapes::ShapeRef.new(shape: DateTime, location_name: "CreatedDate"))
     GetPatchBaselineResult.add_member(:modified_date, Shapes::ShapeRef.new(shape: DateTime, location_name: "ModifiedDate"))
@@ -2036,9 +2043,11 @@ module Aws::SSM
     InstancePatchState.add_member(:patch_group, Shapes::ShapeRef.new(shape: PatchGroup, required: true, location_name: "PatchGroup"))
     InstancePatchState.add_member(:baseline_id, Shapes::ShapeRef.new(shape: BaselineId, required: true, location_name: "BaselineId"))
     InstancePatchState.add_member(:snapshot_id, Shapes::ShapeRef.new(shape: SnapshotId, location_name: "SnapshotId"))
+    InstancePatchState.add_member(:install_override_list, Shapes::ShapeRef.new(shape: InstallOverrideList, location_name: "InstallOverrideList"))
     InstancePatchState.add_member(:owner_information, Shapes::ShapeRef.new(shape: OwnerInformation, location_name: "OwnerInformation"))
     InstancePatchState.add_member(:installed_count, Shapes::ShapeRef.new(shape: PatchInstalledCount, location_name: "InstalledCount"))
     InstancePatchState.add_member(:installed_other_count, Shapes::ShapeRef.new(shape: PatchInstalledOtherCount, location_name: "InstalledOtherCount"))
+    InstancePatchState.add_member(:installed_rejected_count, Shapes::ShapeRef.new(shape: PatchInstalledRejectedCount, location_name: "InstalledRejectedCount", metadata: {"box"=>true}))
     InstancePatchState.add_member(:missing_count, Shapes::ShapeRef.new(shape: PatchMissingCount, location_name: "MissingCount"))
     InstancePatchState.add_member(:failed_count, Shapes::ShapeRef.new(shape: PatchFailedCount, location_name: "FailedCount"))
     InstancePatchState.add_member(:not_applicable_count, Shapes::ShapeRef.new(shape: PatchNotApplicableCount, location_name: "NotApplicableCount"))
@@ -3017,6 +3026,7 @@ module Aws::SSM
     UpdatePatchBaselineRequest.add_member(:approved_patches_compliance_level, Shapes::ShapeRef.new(shape: PatchComplianceLevel, location_name: "ApprovedPatchesComplianceLevel"))
     UpdatePatchBaselineRequest.add_member(:approved_patches_enable_non_security, Shapes::ShapeRef.new(shape: Boolean, location_name: "ApprovedPatchesEnableNonSecurity", metadata: {"box"=>true}))
     UpdatePatchBaselineRequest.add_member(:rejected_patches, Shapes::ShapeRef.new(shape: PatchIdList, location_name: "RejectedPatches"))
+    UpdatePatchBaselineRequest.add_member(:rejected_patches_action, Shapes::ShapeRef.new(shape: PatchAction, location_name: "RejectedPatchesAction"))
     UpdatePatchBaselineRequest.add_member(:description, Shapes::ShapeRef.new(shape: BaselineDescription, location_name: "Description"))
     UpdatePatchBaselineRequest.add_member(:sources, Shapes::ShapeRef.new(shape: PatchSourceList, location_name: "Sources"))
     UpdatePatchBaselineRequest.add_member(:replace, Shapes::ShapeRef.new(shape: Boolean, location_name: "Replace", metadata: {"box"=>true}))
@@ -3031,6 +3041,7 @@ module Aws::SSM
     UpdatePatchBaselineResult.add_member(:approved_patches_compliance_level, Shapes::ShapeRef.new(shape: PatchComplianceLevel, location_name: "ApprovedPatchesComplianceLevel"))
     UpdatePatchBaselineResult.add_member(:approved_patches_enable_non_security, Shapes::ShapeRef.new(shape: Boolean, location_name: "ApprovedPatchesEnableNonSecurity", metadata: {"box"=>true}))
     UpdatePatchBaselineResult.add_member(:rejected_patches, Shapes::ShapeRef.new(shape: PatchIdList, location_name: "RejectedPatches"))
+    UpdatePatchBaselineResult.add_member(:rejected_patches_action, Shapes::ShapeRef.new(shape: PatchAction, location_name: "RejectedPatchesAction"))
     UpdatePatchBaselineResult.add_member(:created_date, Shapes::ShapeRef.new(shape: DateTime, location_name: "CreatedDate"))
     UpdatePatchBaselineResult.add_member(:modified_date, Shapes::ShapeRef.new(shape: DateTime, location_name: "ModifiedDate"))
     UpdatePatchBaselineResult.add_member(:description, Shapes::ShapeRef.new(shape: BaselineDescription, location_name: "Description"))

data/lib/aws-sdk-ssm/types.rb

@@ -2247,6 +2247,7 @@ module Aws::SSM
     #         approved_patches_compliance_level: "CRITICAL", # accepts CRITICAL, HIGH, MEDIUM, LOW, INFORMATIONAL, UNSPECIFIED
     #         approved_patches_enable_non_security: false,
     #         rejected_patches: ["PatchId"],
+    #         rejected_patches_action: "ALLOW_AS_DEPENDENCY", # accepts ALLOW_AS_DEPENDENCY, BLOCK
     #         description: "BaselineDescription",
     #         sources: [
     #           {
@@ -2311,6 +2312,23 @@ module Aws::SSM
     #   [1]: http://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-approved-rejected-package-name-formats.html
     #   @return [Array<String>]
     #
+    # @!attribute [rw] rejected_patches_action
+    #   The action for Patch Manager to take on patches included in the
+    #   RejectedPackages list.
+    #
+    #   * **ALLOW\_AS\_DEPENDENCY**\: A package in the Rejected patches list
+    #     is installed only if it is a dependency of another package. It is
+    #     considered compliant with the patch baseline, and its status is
+    #     reported as *InstalledOther*. This is the default action if no
+    #     option is specified.
+    #
+    #   * **BLOCK**\: Packages in the RejectedPatches list, and packages
+    #     that include them as dependencies, are not installed under any
+    #     circumstances. If a package was installed before it was added to
+    #     the Rejected patches list, it is considered non-compliant with the
+    #     patch baseline, and its status is reported as *InstalledRejected*.
+    #   @return [String]
+    #
     # @!attribute [rw] description
     #   A description of the patch baseline.
     #   @return [String]
@@ -2339,6 +2357,7 @@ module Aws::SSM
       :approved_patches_compliance_level,
       :approved_patches_enable_non_security,
       :rejected_patches,
+      :rejected_patches_action,
       :description,
       :sources,
       :client_token)
@@ -4386,6 +4405,19 @@ module Aws::SSM
     #   in the patch baseline.
     #   @return [Integer]
     #
+    # @!attribute [rw] instances_with_installed_rejected_patches
+    #   The number of instances with patches installed that are specified in
+    #   a RejectedPatches list. Patches with a status of *InstalledRejected*
+    #   were typically installed before they were added to a RejectedPatches
+    #   list.
+    #
+    #   <note markdown="1"> If ALLOW\_AS\_DEPENDENCY is the specified option for
+    #   RejectedPatchesAction, the value of
+    #   InstancesWithInstalledRejectedPatches will always be 0 (zero).
+    #
+    #    </note>
+    #   @return [Integer]
+    #
     # @!attribute [rw] instances_with_missing_patches
     #   The number of instances with missing patches from the patch
     #   baseline.
@@ -4406,6 +4438,7 @@ module Aws::SSM
       :instances,
       :instances_with_installed_patches,
       :instances_with_installed_other_patches,
+      :instances_with_installed_rejected_patches,
       :instances_with_missing_patches,
       :instances_with_failed_patches,
       :instances_with_not_applicable_patches)
@@ -4488,7 +4521,7 @@ module Aws::SSM
     #
     # @!attribute [rw] state
     #   The session status to retrieve a list of sessions for. For example,
-    #   "active".
+    #   "Active".
     #   @return [String]
     #
     # @!attribute [rw] max_results
@@ -6342,6 +6375,13 @@ module Aws::SSM
     #   A list of explicitly rejected patches for the baseline.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] rejected_patches_action
+    #   The action specified to take on patches included in the
+    #   RejectedPatches list. A patch can be allowed only if it is a
+    #   dependency of another package, or blocked entirely along with
+    #   packages that include it as a dependency.
+    #   @return [String]
+    #
     # @!attribute [rw] patch_groups
     #   Patch groups included in the patch baseline.
     #   @return [Array<String>]
@@ -6376,6 +6416,7 @@ module Aws::SSM
       :approved_patches_compliance_level,
       :approved_patches_enable_non_security,
       :rejected_patches,
+      :rejected_patches_action,
       :patch_groups,
       :created_date,
       :modified_date,
@@ -6738,6 +6779,22 @@ module Aws::SSM
     #   operation when this compliance data was collected.
     #   @return [String]
     #
+    # @!attribute [rw] install_override_list
+    #   An https URL or an Amazon S3 path-style URL to a list of patches to
+    #   be installed. This patch installation list, which you maintain in an
+    #   Amazon S3 bucket in YAML format and specify in the SSM document
+    #   `AWS-RunPatchBaseline`, overrides the patches specified by the
+    #   default patch baseline.
+    #
+    #   For more information about the `InstallOverrideList` parameter, see
+    #   [About the SSM Document AWS-RunPatchBaseline][1] in the *AWS Systems
+    #   Manager User Guide*.
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-about-aws-runpatchbaseline.html
+    #   @return [String]
+    #
     # @!attribute [rw] owner_information
     #   Placeholder information. This field will always be empty in the
     #   current release of the service.
@@ -6753,6 +6810,19 @@ module Aws::SSM
     #   installed on the instance.
     #   @return [Integer]
     #
+    # @!attribute [rw] installed_rejected_count
+    #   The number of instances with patches installed that are specified in
+    #   a RejectedPatches list. Patches with a status of *InstalledRejected*
+    #   were typically installed before they were added to a RejectedPatches
+    #   list.
+    #
+    #   <note markdown="1"> If ALLOW\_AS\_DEPENDENCY is the specified option for
+    #   RejectedPatchesAction, the value of InstalledRejectedCount will
+    #   always be 0 (zero).
+    #
+    #    </note>
+    #   @return [Integer]
+    #
     # @!attribute [rw] missing_count
     #   The number of patches from the patch baseline that are applicable
     #   for the instance but aren't currently installed.
@@ -6792,9 +6862,11 @@ module Aws::SSM
       :patch_group,
       :baseline_id,
       :snapshot_id,
+      :install_override_list,
       :owner_information,
       :installed_count,
       :installed_other_count,
+      :installed_rejected_count,
       :missing_count,
       :failed_count,
       :not_applicable_count,
@@ -12702,6 +12774,7 @@ module Aws::SSM
     #         approved_patches_compliance_level: "CRITICAL", # accepts CRITICAL, HIGH, MEDIUM, LOW, INFORMATIONAL, UNSPECIFIED
     #         approved_patches_enable_non_security: false,
     #         rejected_patches: ["PatchId"],
+    #         rejected_patches_action: "ALLOW_AS_DEPENDENCY", # accepts ALLOW_AS_DEPENDENCY, BLOCK
     #         description: "BaselineDescription",
     #         sources: [
     #           {
@@ -12764,6 +12837,23 @@ module Aws::SSM
     #   [1]: http://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-approved-rejected-package-name-formats.html
     #   @return [Array<String>]
     #
+    # @!attribute [rw] rejected_patches_action
+    #   The action for Patch Manager to take on patches included in the
+    #   RejectedPackages list.
+    #
+    #   * **ALLOW\_AS\_DEPENDENCY**\: A package in the Rejected patches list
+    #     is installed only if it is a dependency of another package. It is
+    #     considered compliant with the patch baseline, and its status is
+    #     reported as *InstalledOther*. This is the default action if no
+    #     option is specified.
+    #
+    #   * **BLOCK**\: Packages in the RejectedPatches list, and packages
+    #     that include them as dependencies, are not installed under any
+    #     circumstances. If a package was installed before it was added to
+    #     the Rejected patches list, it is considered non-compliant with the
+    #     patch baseline, and its status is reported as *InstalledRejected*.
+    #   @return [String]
+    #
     # @!attribute [rw] description
     #   A description of the patch baseline.
     #   @return [String]
@@ -12791,6 +12881,7 @@ module Aws::SSM
       :approved_patches_compliance_level,
       :approved_patches_enable_non_security,
       :rejected_patches,
+      :rejected_patches_action,
       :description,
       :sources,
       :replace)
@@ -12836,6 +12927,13 @@ module Aws::SSM
     #   A list of explicitly rejected patches for the baseline.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] rejected_patches_action
+    #   The action specified to take on patches included in the
+    #   RejectedPatches list. A patch can be allowed only if it is a
+    #   dependency of another package, or blocked entirely along with
+    #   packages that include it as a dependency.
+    #   @return [String]
+    #
     # @!attribute [rw] created_date
     #   The date when the patch baseline was created.
     #   @return [Time]
@@ -12866,6 +12964,7 @@ module Aws::SSM
       :approved_patches_compliance_level,
       :approved_patches_enable_non_security,
       :rejected_patches,
+      :rejected_patches_action,
       :created_date,
       :modified_date,
       :description,

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-ssm
 version: !ruby/object:Gem::Version
-  version: 1.26.0
+  version: 1.27.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-09-11 00:00:00.000000000 Z
+date: 2018-10-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core