Skip to content

aws.ssm.describe_effective_patches_for_patch_baseline

Example SQL Queries

SELECT * FROM
aws.ssm.describe_effective_patches_for_patch_baseline
WHERE
"baseline_id" = 'VALUE';

Description

Retrieves the current effective patches (the patch and the approval state) for the specified patch baseline. Applies to patch baselines for Windows only.

Table Definition

Column NameColumn Data Type
baseline_id Required Input Column

The ID of the patch baseline to retrieve the effective patches for.

VARCHAR
_aws_profile Input Column

The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role.

STRUCT(
"type" VARCHAR,
"name" VARCHAR,
"account_id" VARCHAR,
"via_profile_name" VARCHAR,
"assumed_role_arn" VARCHAR,
"organization" STRUCT(
"account_name" VARCHAR,
"id" VARCHAR,
"tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[],
"master_account" STRUCT(
"id" VARCHAR,
"email" VARCHAR
),
"parents" STRUCT(
"type" VARCHAR,
"id" VARCHAR,
"name" VARCHAR,
"tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[]
)[]
)
)
Show child fields
_aws_profile.account_id

The AWS account id

_aws_profile.assumed_role_arn

The ARN of the assumed role

_aws_profile.name

The unique name of the profile.

_aws_profile.organization

Information about this profile's membership in the AWS organization.

Show child fields
_aws_profile.organization.account_name

The name of account speciifed by the organization

_aws_profile.organization.id

The organization id

_aws_profile.organization.master_account
Show child fields
_aws_profile.organization.master_account.email

The organization master account email address

_aws_profile.organization.master_account.id

The organization master account id

_aws_profile.organization.parents[]
Show child fields
_aws_profile.organization.parents[].id

The id of the parent

_aws_profile.organization.parents[].name

The name of the parent

_aws_profile.organization.parents[].tags[]
Show child fields
_aws_profile.organization.parents[].tags[].key
_aws_profile.organization.parents[].tags[].value
_aws_profile.organization.parents[].type

The type of parent can be an organization unit or a root

_aws_profile.organization.tags[]
Show child fields
_aws_profile.organization.tags[].key
_aws_profile.organization.tags[].value
_aws_profile.type

The type of profile, either 'credentials' or 'assumed_role'

_aws_profile.via_profile_name

This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.

_aws_region Input Column

The AWS region to use.

VARCHAR
patch

Provides metadata for a patch, including information such as the KB ID, severity, classification and a URL for where more information can be obtained about the patch.

STRUCT(
"id" VARCHAR,
"release_date" TIMESTAMP_S,
"title" VARCHAR,
"description" VARCHAR,
"content_url" VARCHAR,
"vendor" VARCHAR,
"product_family" VARCHAR,
"product" VARCHAR,
"classification" VARCHAR,
"msrc_severity" VARCHAR,
"kb_number" VARCHAR,
"msrc_number" VARCHAR,
"language" VARCHAR,
"advisory_ids" VARCHAR[],
"bugzilla_ids" VARCHAR[],
"cve_ids" VARCHAR[],
"name" VARCHAR,
"epoch" BIGINT,
"version" VARCHAR,
"release" VARCHAR,
"arch" VARCHAR,
"severity" VARCHAR,
"repository" VARCHAR
)
Show child fields
patch.advisory_ids[]
patch.arch

The architecture of the patch. For example, in example-pkg-0.710.10-2.7.abcd.x86_64, the architecture is indicated by x86_64. Applies to Linux-based managed nodes only.

patch.bugzilla_ids[]
patch.classification

The classification of the patch. For example, SecurityUpdates, Updates, or CriticalUpdates.

patch.content_url

The URL where more information can be obtained about the patch.

patch.cve_ids[]
patch.description

The description of the patch.

patch.epoch

The epoch of the patch. For example in pkg-example-EE-20180914-2.2.amzn1.noarch, the epoch value is 20180914-2. Applies to Linux-based managed nodes only.

patch.id

The ID of the patch. Applies to Windows patches only.

This ID isn't the same as the Microsoft Knowledge Base ID.

patch.kb_number

The Microsoft Knowledge Base ID of the patch. Applies to Windows patches only.

patch.language

The language of the patch if it's language-specific.

patch.msrc_number

The ID of the Microsoft Security Response Center (MSRC) bulletin the patch is related to. For example, MS14-045. Applies to Windows patches only.

patch.msrc_severity

The severity of the patch, such as Critical, Important, or Moderate. Applies to Windows patches only.

patch.name

The name of the patch. Applies to Linux-based managed nodes only.

patch.product

The specific product the patch is applicable for. For example, WindowsServer2016 or AmazonLinux2018.03.

patch.product_family

The product family the patch is applicable for. For example, Windows or Amazon Linux 2.

patch.release

The particular release of a patch. For example, in pkg-example-EE-20180914-2.2.amzn1.noarch, the release is 2.amaz1. Applies to Linux-based managed nodes only.

patch.release_date

The date the patch was released.

patch.repository

The source patch repository for the operating system and version, such as trusty-security for Ubuntu Server 14.04 LTE and focal-security for Ubuntu Server 20.04 LTE. Applies to Linux-based managed nodes only.

patch.severity

The severity level of the patch. For example, CRITICAL or MODERATE.

patch.title

The title of the patch.

patch.vendor

The name of the vendor providing the patch.

patch.version

The version number of the patch. For example, in example-pkg-1.710.10-2.7.abcd.x86_64, the version number is indicated by -1. Applies to Linux-based managed nodes only.

patch_status

The status of the patch in a patch baseline. This includes information about whether the patch is currently approved, due to be approved by a rule, explicitly approved, or explicitly rejected and the date the patch was or will be approved.

STRUCT(
"deployment_status" VARCHAR,
"compliance_level" VARCHAR,
"approval_date" TIMESTAMP_S
)
Show child fields
patch_status.approval_date

The date the patch was approved (or will be approved if the status is PENDING_APPROVAL).

patch_status.compliance_level

The compliance severity level for a patch.

patch_status.deployment_status

The approval status of a patch.