Skip to content

Commit c49eb9c

Browse files
Update sra-patch_mgmt-org-main-ssm.yaml
1 parent 62f62a0 commit c49eb9c

File tree

1 file changed

+101
-54
lines changed

1 file changed

+101
-54
lines changed

aws_sra_examples/solutions/patch_mgmt/patch_mgmt_org/templates/sra-patch_mgmt-org-main-ssm.yaml

Lines changed: 101 additions & 54 deletions
Original file line numberDiff line numberDiff line change
@@ -43,6 +43,53 @@ Metadata:
4343
- pControlTowerLifeCycleRuleName
4444
- pComplianceFrequency
4545

46+
- Label:
47+
default: Patch Management Solution Properties
48+
Parameters:
49+
# Window 1
50+
- pPatchMgmtMaintWindow1Name
51+
- pPatchMgmtMaintWindow1Desc
52+
- pPatchMgmtMaintWindow1Schedule
53+
- pPatchMgmtMaintWindow1Duration
54+
- pPatchMgmtMaintWindow1Cutoff
55+
- pPatchMgmtMaintWindow1TZ
56+
- pPatchMgmtTask1Name
57+
- pPatchMgmtTask1Desc
58+
- pPatchMgmtTask1Operation
59+
- pPatchMgmtTask1RunCmd
60+
- pPatchMgmtTarget1Name
61+
- pPatchMgmtTarget1Desc
62+
- pPatchMgmtTarget1Value1
63+
- pPatchMgmtTarget1Value2
64+
# Window 2
65+
- pPatchMgmtMaintWindow2Name
66+
- pPatchMgmtMaintWindow2Desc
67+
- pPatchMgmtMaintWindow2Schedule
68+
- pPatchMgmtMaintWindow2Duration
69+
- pPatchMgmtMaintWindow2Cutoff
70+
- pPatchMgmtMaintWindow2TZ
71+
- pPatchMgmtTask2Name
72+
- pPatchMgmtTask2Desc
73+
- pPatchMgmtTask2Operation
74+
- pPatchMgmtTask2RunCmd
75+
- pPatchMgmtTarget2Name
76+
- pPatchMgmtTarget2Desc
77+
- pPatchMgmtTarget2Value1
78+
# Window 3
79+
- pPatchMgmtMaintWindow3Name
80+
- pPatchMgmtMaintWindow3Desc
81+
- pPatchMgmtMaintWindow3Schedule
82+
- pPatchMgmtMaintWindow3Duration
83+
- pPatchMgmtMaintWindow3Cutoff
84+
- pPatchMgmtMaintWindow3TZ
85+
- pPatchMgmtTask3Name
86+
- pPatchMgmtTask3Desc
87+
- pPatchMgmtTask3Operation
88+
- pPatchMgmtTask3RunCmd
89+
- pPatchMgmtTarget3Name
90+
- pPatchMgmtTarget3Desc
91+
- pPatchMgmtTarget3Value1
92+
4693
ParameterLabels:
4794
pAuditAccountId:
4895
default: Audit Account ID
@@ -74,7 +121,7 @@ Metadata:
74121
default: SRA Solution Version
75122
pSRAStagingS3BucketName:
76123
default: SRA Staging S3 Bucket Name
77-
# Window 1
124+
# Window 1 - main title of parameter
78125
pPatchMgmtMaintWindow1Name:
79126
default: Patch Management Maintenance Window 1 Name
80127
pPatchMgmtMaintWindow1Desc:
@@ -103,7 +150,7 @@ Metadata:
103150
default: Patch Management Target 1 Value 1
104151
pPatchMgmtTarget1Value2:
105152
default: Patch Management Target 1 Value 2
106-
# Window 2
153+
# Window 2 - main title of parameter
107154
pPatchMgmtMaintWindow2Name:
108155
default: Patch Management Maintenance Window 2 Name
109156
pPatchMgmtMaintWindow2Desc:
@@ -130,7 +177,7 @@ Metadata:
130177
default: Patch Management Target 2 Description
131178
pPatchMgmtTarget2Value1:
132179
default: Patch Management Target 2 Value 1
133-
# Window 3
180+
# Window 3 - main title of parameter
134181
pPatchMgmtMaintWindow3Name:
135182
default: Patch Management Maintenance Window 3 Name
136183
pPatchMgmtMaintWindow3Desc:
@@ -263,167 +310,167 @@ Parameters:
263310
Default: v1.0
264311
Description: The SRA solution version. Used to trigger updates on the nested StackSets.
265312
Type: String
266-
# Window 1
313+
# Window 1 - parameter sub-description and default value
267314
pPatchMgmtMaintWindow1Name:
268-
Description: Patch Management Maintenance Window 1 Name
315+
Description: Name for first Maintenance Window
269316
Default: Update_SSM
270317
Type: String
271318
pPatchMgmtMaintWindow1Desc:
272-
Description: Patch Management Maintenance Window 1 Description
273-
Default: Maintenance Window update the SSM Agent on managed Instances
319+
Description: Description for first Maintenance Window
320+
Default: Maintenance Window To Update The SSM Agent On Managed Instances
274321
Type: String
275322
pPatchMgmtMaintWindow1Schedule:
276-
Description: Patch Management Maintenance Window 1 schedule
277-
Default: "cron(0 0 1 ? * THU *)"
323+
Description: Scheduled start time of the first Maintenance Window
324+
Default: "cron(0 0 1 ? * WED *)"
278325
Type: String
279326
pPatchMgmtMaintWindow1Duration:
280-
Description: Patch Management Maintenance Window 1 Duration (hrs)
327+
Description: Duration (hours) of the Maintenance Window
281328
Default: 6
282329
Type: Number
283330
pPatchMgmtMaintWindow1Cutoff:
284-
Description: Stop initiating tasks before maintenance window ends (hrs)
331+
Description: Stop initiating tasks (hours) before maintenance window ends
285332
Default: 1
286333
Type: Number
287334
pPatchMgmtMaintWindow1TZ:
288335
Description: Patch Management Maintenance Window 1 Timezone
289336
Default: America/New_York
290337
Type: String
291338
pPatchMgmtTask1Name:
292-
Description: Patch Management Task 1 Name
339+
Description: Name of the first Task to Update SSM Agent
293340
Type: String
294-
Default: Update_SSMAgent
341+
Default: Update SSMAgent On Managed Instances
295342
pPatchMgmtTask1Desc:
296-
Description: Patch Management Task 1 Description
297-
Default: Task to update SSM Agent on all managed Instances
343+
Description: Description of the Task to Update SSM Agent
344+
Default: Task To Update SSMAgent On Managed Instances
298345
Type: String
299346
pPatchMgmtTask1Operation:
300-
Description: Patch Management Task 1 Operation
347+
Description: Patch Management Task 1 Operation (Scan Only, or Install Patches)
301348
Default: Scan
302349
Type: String
303350
pPatchMgmtTask1RunCmd:
304351
Description: Patch Management Task 1 Run Command
305352
Default: AWS-UpdateSSMAgent
306353
Type: String
307354
pPatchMgmtTarget1Name:
308-
Description: Patch Management Target 1 Name
309-
Default: AWS-UpdateSSMAgent
355+
Description: Name of Target Group for first Maintenance Window
356+
Default: Targets To Update SSMAgent On Managed Instances
310357
Type: String
311358
pPatchMgmtTarget1Desc:
312-
Description: Patch Management Target 1 Description
313-
Default: Targets to run the command to update SSM Agent
359+
Description: Description of Target Group for first Maintenance Window
360+
Default: Targets To Update SSMAgent On Managed Instances
314361
Type: String
315362
pPatchMgmtTarget1Value1:
316-
Description: Patch Management Tag Value of Target group 1
363+
Description: Patch Management Tag 1 Value of Target
317364
Default: Linux
318365
Type: String
319366
pPatchMgmtTarget1Value2:
320-
Description: Patch Management Tag Value of Target group 1
367+
Description: Patch Management Tag 2 Value of Target
321368
Default: Windows
322369
Type: String
323-
# Window 2
370+
# Window 2 - parameter sub-description and default value
324371
pPatchMgmtMaintWindow2Name:
325-
Description: Patch Management Maintenance Window 2 Name
372+
Description: Name for second Maintenance Window
326373
Default: Windows_Scan
327374
Type: String
328375
pPatchMgmtMaintWindow2Desc:
329-
Description: Patch Management Maintenance Window Description
376+
Description: Description for second Maintenance Window
330377
Default: Maintenance Window to scan Windows Instances
331378
Type: String
332379
pPatchMgmtMaintWindow2Schedule:
333-
Description: Patch Management Maintenance Window 2 schedule
334-
Default: "cron(0 0 1 ? * WED *)"
380+
Description: Scheduled start time of the second Maintenance Window
381+
Default: "cron(0 0 1 ? * THU *)"
335382
Type: String
336383
pPatchMgmtMaintWindow2Duration:
337-
Description: Patch Management Maintenance Window 2 Duration (hrs)
384+
Description: Duration (hours) of the Maintenance Window
338385
Default: 6
339386
Type: Number
340387
pPatchMgmtMaintWindow2Cutoff:
341-
Description: Stop initiating tasks before maintenance window ends (hrs)
388+
Description: Stop initiating tasks (hours) before maintenance window ends
342389
Default: 1
343390
Type: Number
344391
pPatchMgmtMaintWindow2TZ:
345392
Description: Patch Management Maintenance Window 2 Timezone
346393
Default: America/New_York
347394
Type: String
348395
pPatchMgmtTask2Name:
349-
Description: Patch Management Task 2 Name
396+
Description: Name of the first Task to Scan Windows
350397
Type: String
351-
Default: Windows_Scan
398+
Default: Scan For Patches On Managed Windows Instances
352399
pPatchMgmtTask2Desc:
353-
Description: Patch Management Task 2 Description
354-
Default: Task to scan Windows Instances
400+
Description: Description of the Task to Scan for Windows Patches
401+
Default: Task To Scan For Patches On Managed Windows Instances
355402
Type: String
356403
pPatchMgmtTask2Operation:
357-
Description: Patch Management Task 2 Operation
404+
Description: Patch Management Task 2 Operation (Scan Only, or Install Patches)
358405
Default: Scan
359406
Type: String
360407
pPatchMgmtTask2RunCmd:
361408
Description: Patch Management Task 2 Run Command
362409
Default: AWS-RunPatchBaseline
363410
Type: String
364411
pPatchMgmtTarget2Name:
365-
Description: Patch Management Target 2 Name
366-
Default: AWS-RunPatchBaseline
412+
Description: Name of Target Group for second Maintenance Window
413+
Default: Targets To Scan For Windows Updates On Managed Instances
367414
Type: String
368415
pPatchMgmtTarget2Desc:
369416
Description: Patch Management Target 2 Description
370-
Default: Targets to run the command to scan for Windows updates
417+
Default: Targets To Scan For Windows Updates On Managed Instances
371418
Type: String
372419
pPatchMgmtTarget2Value1:
373-
Description: Patch Management Tag Value of Target group 2
420+
Description: Patch Management Tag Value of Target
374421
Default: Windows
375422
Type: String
376-
# Window 3
423+
# Window 3 - parameter sub-description and default value
377424
pPatchMgmtMaintWindow3Name:
378-
Description: Patch Management Maintenance Window 3 Name
425+
Description: Name for third Maintenance Window
379426
Default: Linux_Scan
380427
Type: String
381428
pPatchMgmtMaintWindow3Desc:
382-
Description: Patch Management Maintenance Window 3 Description
383-
Default: Maintenance Window scan Linux Instances
429+
Description: Description for third Maintenance Window
430+
Default: Maintenance Window to scan Linux Instances
384431
Type: String
385432
pPatchMgmtMaintWindow3Schedule:
386-
Description: Patch Management Maintenance Window 3 schedule
433+
Description: Scheduled start time of the third Maintenance Window
387434
Default: "cron(0 0 1 ? * FRI *)"
388435
Type: String
389436
pPatchMgmtMaintWindow3Duration:
390-
Description: Patch Management Maintenance Window 3 Duration (hrs)
437+
Description: Duration (hours) of the Maintenance Window
391438
Default: 6
392439
Type: Number
393440
pPatchMgmtMaintWindow3Cutoff:
394-
Description: Stop initiating tasks before maintenance window ends (hrs)
441+
Description: Stop initiating tasks (hours) before maintenance window ends
395442
Default: 1
396443
Type: Number
397444
pPatchMgmtMaintWindow3TZ:
398445
Description: Patch Management Maintenance Window 3 Timezone
399446
Default: America/New_York
400447
Type: String
401448
pPatchMgmtTask3Name:
402-
Description: Patch Management Task 3 Name
449+
Description: Name of the third Task to Scan Linux
403450
Type: String
404-
Default: Linux_Scan
451+
Default: Scan For Patches On Managed Linux Instances
405452
pPatchMgmtTask3Desc:
406453
Description: Patch Management Task 3 Description
407-
Default: Task to scan Windows Instances
454+
Default: Task To Scan For Patches On Managed Linux Instances
408455
Type: String
409456
pPatchMgmtTask3Operation:
410-
Description: Patch Management Task 3 Operation
457+
Description: Patch Management Task 3 Operation (Scan Only, or Install Patches)
411458
Default: Scan
412459
Type: String
413460
pPatchMgmtTask3RunCmd:
414461
Description: Patch Management Task 3 Run Command
415462
Default: AWS-RunPatchBaseline
416463
Type: String
417464
pPatchMgmtTarget3Name:
418-
Description: Patch Management Target 3 Name
419-
Default: AWS-RunPatchBaseline
465+
Description: Name of Target Group for third Maintenance Window
466+
Default: Targets To Scan For Linux Updates On Managed Instances
420467
Type: String
421468
pPatchMgmtTarget3Desc:
422469
Description: Patch Management Target 3 Description
423-
Default: Targets to run the command to scan for Linux updates
470+
Default: Targets To Scan For Linux Updates On Managed Instances
424471
Type: String
425472
pPatchMgmtTarget3Value1:
426-
Description: Patch Management Tag Value of Target group 3
473+
Description: Patch Management Tag Value of Target
427474
Default: Linux
428475
Type: String
429476

@@ -527,7 +574,7 @@ Resources:
527574
pPatchMgmtMaintWindow3TZ: !Ref pPatchMgmtMaintWindow3TZ
528575
pPatchMgmtTask3Name: !Ref pPatchMgmtTask3Name
529576
pPatchMgmtTask3Desc: !Ref pPatchMgmtTask3Desc
530-
pPatchMgmtTask2Operation: !Ref pPatchMgmtTask2Operation
577+
pPatchMgmtTask3Operation: !Ref pPatchMgmtTask3Operation
531578
pPatchMgmtTask3RunCmd: !Ref pPatchMgmtTask3RunCmd
532579
pPatchMgmtTarget3Name: !Ref pPatchMgmtTarget3Name
533580
pPatchMgmtTarget3Desc: !Ref pPatchMgmtTarget3Desc

0 commit comments

Comments
 (0)