From aef9d12aa193419265f6adcd137a66262c51838f Mon Sep 17 00:00:00 2001
From: awstools An API operation used by the Systems Manager console to display information about Systems Manager managed nodes. An error occurred on the server side. The activation ID isn't valid. Verify the you entered the correct ActivationId or
+ * ActivationCode and try again. The specified SSM document doesn't exist. The specified key isn't valid. The following problems can cause this exception: You don't have permission to access the managed node. Amazon Web Services Systems Manager Agent (SSM Agent) isn't running. Verify that SSM Agent is
+ * running. SSM Agent isn't registered with the SSM endpoint. Try reinstalling SSM Agent. The managed node isn't in a valid state. Valid states are: The specified filter value isn't valid. The specified token isn't valid. Base exception class for all service exceptions from SSM service.
+DescribeInstanceProperties
+
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/ssm/command/DescribeInstancePropertiesCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-ssm/Interface/DescribeInstancePropertiesCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-ssm/Interface/DescribeInstancePropertiesCommandOutput/)
+
diff --git a/clients/client-ssm/src/SSM.ts b/clients/client-ssm/src/SSM.ts
index 160c9d547248..c58d70199e81 100644
--- a/clients/client-ssm/src/SSM.ts
+++ b/clients/client-ssm/src/SSM.ts
@@ -227,6 +227,11 @@ import {
DescribeInstancePatchStatesForPatchGroupCommandInput,
DescribeInstancePatchStatesForPatchGroupCommandOutput,
} from "./commands/DescribeInstancePatchStatesForPatchGroupCommand";
+import {
+ DescribeInstancePropertiesCommand,
+ DescribeInstancePropertiesCommandInput,
+ DescribeInstancePropertiesCommandOutput,
+} from "./commands/DescribeInstancePropertiesCommand";
import {
DescribeInventoryDeletionsCommand,
DescribeInventoryDeletionsCommandInput,
@@ -733,6 +738,7 @@ const commands = {
DescribeInstancePatchesCommand,
DescribeInstancePatchStatesCommand,
DescribeInstancePatchStatesForPatchGroupCommand,
+ DescribeInstancePropertiesCommand,
DescribeInventoryDeletionsCommand,
DescribeMaintenanceWindowExecutionsCommand,
DescribeMaintenanceWindowExecutionTaskInvocationsCommand,
@@ -1571,6 +1577,24 @@ export interface SSM {
cb: (err: any, data?: DescribeInstancePatchStatesForPatchGroupCommandOutput) => void
): void;
+ /**
+ * @see {@link DescribeInstancePropertiesCommand}
+ */
+ describeInstanceProperties(): Promise
+ *
+ *
+ * @throws {@link InvalidInstancePropertyFilterValue} (client fault)
+ * Running
,
+ * Pending
, Stopped
, and Stopping
. Invalid states are:
+ * Shutting-down
and Terminated
.
Supported formats include the following.
+ *+ * For all Systems Manager capabilities: + *
*
- * Key=InstanceIds,Values=
+ * Key=tag-key,Values=tag-value-1,tag-value-2
*
+ * For Automation and Change Manager: + *
+ *
- * Key=tag:
+ * Key=tag:tag-key,Values=tag-value
*
- * Key=tag-key,Values=
+ * Key=ResourceGroup,Values=resource-group-name
*
- * Run Command and Maintenance window targets only:
- * Key=resource-groups:Name,Values=
+ * Key=ParameterValues,Values=value-1,value-2,value-3
*
- * Maintenance window targets only:
- * Key=resource-groups:ResourceTypeFilters,Values=
- *
- * Automation targets only:
- * Key=ResourceGroup;Values=
- *
To target all instances in the Amazon Web Services Region:
+ *
+ * Key=AWS::EC2::Instance,Values=*
+ *
+ * Key=InstanceIds,Values=*
+ *
For example:
+ *+ * For Run Command and Maintenance Windows: + *
*
- * Key=InstanceIds,Values=i-02573cafcfEXAMPLE,i-0471e04240EXAMPLE,i-07782c72faEXAMPLE
+ * Key=InstanceIds,Values=instance-id-1,instance-id-2,instance-id-3
*
- * Key=tag:CostCenter,Values=CostCenter1,CostCenter2,CostCenter3
+ * Key=tag:tag-key,Values=tag-value-1,tag-value-2
*
- * Key=tag-key,Values=Name,Instance-Type,CostCenter
+ * Key=resource-groups:Name,Values=resource-group-name
*
- * Run Command and Maintenance window targets only:
- * Key=resource-groups:Name,Values=ProductionResourceGroup
- *
This example demonstrates how to target all resources in the resource group ProductionResourceGroup in your maintenance window.
+ *Additionally, Maintenance Windows support targeting resource types:
+ *
+ * Key=resource-groups:ResourceTypeFilters,Values=resource-type-1,resource-type-2
+ *
+ * For State Manager: + *
+ *
- * Maintenance window targets only:
- * Key=resource-groups:ResourceTypeFilters,Values=AWS::EC2::INSTANCE,AWS::EC2::VPC
+ * Key=InstanceIds,Values=instance-id-1,instance-id-2,instance-id-3
*
This example demonstrates how to target only Amazon Elastic Compute Cloud (Amazon EC2) - * instances and VPCs in your maintenance window.
*
- * Automation targets only:
- * Key=ResourceGroup,Values=MyResourceGroup
+ * Key=tag:tag-key,Values=tag-value-1,tag-value-2
*
- * State Manager association targets only:
- * Key=InstanceIds,Values=*
- *
This example demonstrates how to target all managed instances in the Amazon Web Services Region where - * the association was created.
+ *To target all instances in the Amazon Web Services Region:
+ *
+ * Key=InstanceIds,Values=*
+ *
For more information about how to send commands that target managed nodes using
@@ -2348,6 +2366,21 @@ export interface CreateDocumentRequest {
* amzn
*
+ * AWSEC2
+ *
+ * AWSConfigRemediation
+ *
+ * AWSSupport
+ *
The date and time, in ISO-8601 Extended format, for when you want the maintenance window to
* become active. StartDate
allows you to delay activation of the maintenance window
* until the specified future date.
When using a rate schedule, if you provide a start date that occurs in the past, the + * current date and time are used as the start date.
+ *The filters to describe or get information about your managed nodes.
+ * @public + */ +export interface InstancePropertyStringFilter { + /** + *The filter key name to describe your managed nodes.
+ * @public + */ + Key: string | undefined; + + /** + *The filter key name to describe your managed nodes.
+ * @public + */ + Values: string[] | undefined; + + /** + *The operator used by the filter call.
+ * @public + */ + Operator?: InstancePropertyFilterOperator; +} + +/** + * @public + * @enum + */ +export const InstancePropertyFilterKey = { + ACTIVATION_IDS: "ActivationIds", + AGENT_VERSION: "AgentVersion", + ASSOCIATION_STATUS: "AssociationStatus", + DOCUMENT_NAME: "DocumentName", + IAM_ROLE: "IamRole", + INSTANCE_IDS: "InstanceIds", + PING_STATUS: "PingStatus", + PLATFORM_TYPES: "PlatformTypes", + RESOURCE_TYPE: "ResourceType", +} as const; + +/** + * @public + */ +export type InstancePropertyFilterKey = (typeof InstancePropertyFilterKey)[keyof typeof InstancePropertyFilterKey]; + +/** + *Describes a filter for a specific list of managed nodes. You can filter node information by using tags. You specify tags by using a key-value mapping.
+ * @public + */ +export interface InstancePropertyFilter { + /** + *The name of the filter.
+ * @public + */ + key: InstancePropertyFilterKey | undefined; + + /** + *The filter values.
+ * @public + */ + valueSet: string[] | undefined; +} + +/** + * @public + */ +export interface DescribeInstancePropertiesRequest { + /** + *An array of instance property filters.
+ * @public + */ + InstancePropertyFilterList?: InstancePropertyFilter[]; + + /** + *The request filters to use with the operator.
+ * @public + */ + FiltersWithOperator?: InstancePropertyStringFilter[]; + + /** + *The maximum number of items to return for the call. The call also returns a token that you + * can specify in a subsequent call to get the next set of results.
+ * @public + */ + MaxResults?: number; + + /** + *The token provided by a previous request to use to return the next set of properties.
+ * @public + */ + NextToken?: string; +} + +/** + *An object containing various properties of a managed node.
+ * @public + */ +export interface InstanceProperty { + /** + *The value of the EC2 Name
tag associated with the node. If a Name
tag hasn't been applied to the node, this value is blank.
The ID of the managed node.
+ * @public + */ + InstanceId?: string; + + /** + *The instance type of the managed node. For example, t3.large.
+ * @public + */ + InstanceType?: string; + + /** + *The instance profile attached to the node. If an instance profile isn't attached to the node, this value is blank.
+ * @public + */ + InstanceRole?: string; + + /** + *The name of the key pair associated with the node. If a key pair isnt't associated with the node, this value is blank.
+ * @public + */ + KeyName?: string; + + /** + *The current state of the node.
+ * @public + */ + InstanceState?: string; + + /** + *The CPU architecture of the node. For example, x86_64.
+ * @public + */ + Architecture?: string; + + /** + *The public IPv4 address assigned to the node. If a public IPv4 address isn't assigned to the node, this value is blank.
+ * @public + */ + IPAddress?: string; + + /** + *The timestamp for when the node was launched.
+ * @public + */ + LaunchTime?: Date; + + /** + *Connection status of the SSM Agent on the managed node.
+ * @public + */ + PingStatus?: PingStatus; + + /** + *The date and time when the SSM Agent last pinged the Systems Manager service.
+ * @public + */ + LastPingDateTime?: Date; + + /** + *The version of SSM Agent running on your managed node.
+ * @public + */ + AgentVersion?: string; + + /** + *The operating system platform type of the managed node. For example, Windows.
+ * @public + */ + PlatformType?: PlatformType; + + /** + *The name of the operating system platform running on your managed node.
+ * @public + */ + PlatformName?: string; + + /** + *The version of the OS platform running on your managed node.
+ * @public + */ + PlatformVersion?: string; + + /** + *The activation ID created by Systems Manager when the server or virtual machine (VM) was registered
+ * @public + */ + ActivationId?: string; + + /** + *The IAM role used in the hybrid activation to register the node with Systems Manager.
+ * @public + */ + IamRole?: string; + + /** + *The date the node was registered with Systems Manager.
+ * @public + */ + RegistrationDate?: Date; + + /** + *The type of managed node.
+ * @public + */ + ResourceType?: string; + + /** + *The fully qualified host name of the managed node.
+ * @public + */ + ComputerName?: string; + + /** + *The status of the State Manager association applied to the managed node.
+ * @public + */ + AssociationStatus?: string; + + /** + *The date the association was last run.
+ * @public + */ + LastAssociationExecutionDate?: Date; + + /** + *The last date the association was successfully run.
+ * @public + */ + LastSuccessfulAssociationExecutionDate?: Date; + + /** + *Status information about the aggregated associations.
+ * @public + */ + AssociationOverview?: InstanceAggregatedAssociationOverview; + + /** + *The ID of the source resource.
+ * @public + */ + SourceId?: string; + + /** + *The type of the source resource.
+ * @public + */ + SourceType?: SourceType; +} + +/** + * @public + */ +export interface DescribeInstancePropertiesResult { + /** + *Properties for the managed instances.
+ * @public + */ + InstanceProperties?: InstanceProperty[]; + + /** + *The token for the next set of properties to return. Use this token to get the next set of + * results.
+ * @public + */ + NextToken?: string; +} + +/** + *The specified filter value isn't valid.
+ * @public + */ +export class InvalidInstancePropertyFilterValue extends __BaseException { + readonly name: "InvalidInstancePropertyFilterValue" = "InvalidInstancePropertyFilterValue"; + readonly $fault: "client" = "client"; + /** + * @internal + */ + constructor(opts: __ExceptionOptionTypeInformation about maintenance window executions scheduled for the specified time - * range.
- * @public - */ - ScheduledWindowExecutions?: ScheduledWindowExecution[]; - - /** - *The token for the next set of items to return. (You use this token in the next call.)
- * @public - */ - NextToken?: string; -} - -/** - * @public - */ -export interface DescribeMaintenanceWindowsForTargetRequest { - /** - *The managed node ID or key-value pair to retrieve information about.
- * @public - */ - Targets: Target[] | undefined; - - /** - *The type of resource you want to retrieve information about. For example,
- * INSTANCE
.
The maximum number of items to return for this call. The call also returns a token that you - * can specify in a subsequent call to get the next set of results.
- * @public - */ - MaxResults?: number; - - /** - *The token for the next set of items to return. (You received this token from a previous - * call.)
- * @public - */ - NextToken?: string; -} - -/** - *The maintenance window to which the specified target belongs.
- * @public - */ -export interface MaintenanceWindowIdentityForTarget { - /** - *The ID of the maintenance window.
- * @public - */ - WindowId?: string; - - /** - *The name of the maintenance window.
- * @public - */ - Name?: string; -} - -/** - * @public - */ -export interface DescribeMaintenanceWindowsForTargetResult { - /** - *Information about the maintenance window targets and tasks a managed node is associated - * with.
- * @public - */ - WindowIdentities?: MaintenanceWindowIdentityForTarget[]; - - /** - *The token for the next set of items to return. (You use this token in the next call.)
- * @public - */ - NextToken?: string; -} - -/** - * @public - */ -export interface DescribeMaintenanceWindowTargetsRequest { - /** - *The ID of the maintenance window whose targets should be retrieved.
- * @public - */ - WindowId: string | undefined; - - /** - *Optional filters that can be used to narrow down the scope of the returned window targets.
- * The supported filter keys are Type
, WindowTargetId
, and
- * OwnerInformation
.
The maximum number of items to return for this call. The call also returns a token that you - * can specify in a subsequent call to get the next set of results.
- * @public - */ - MaxResults?: number; - - /** - *The token for the next set of items to return. (You received this token from a previous - * call.)
- * @public - */ - NextToken?: string; -} - -/** - *The target registered with the maintenance window.
- * @public - */ -export interface MaintenanceWindowTarget { - /** - *The ID of the maintenance window to register the target with.
- * @public - */ - WindowId?: string; - - /** - *The ID of the target.
- * @public - */ - WindowTargetId?: string; - - /** - *The type of target that is being registered with the maintenance window.
- * @public - */ - ResourceType?: MaintenanceWindowResourceType; - - /** - *The targets, either managed nodes or tags.
- *Specify managed nodes using the following format:
- *
- * Key=instanceids,Values=
- *
Tags are specified using the following format:
- *
- * Key=
.
A user-provided value that will be included in any Amazon CloudWatch Events events that are - * raised while running tasks for these targets in this maintenance window.
- * @public - */ - OwnerInformation?: string; - - /** - *The name for the maintenance window target.
- * @public - */ - Name?: string; - - /** - *A description for the target.
- * @public - */ - Description?: string; -} - -/** - * @public - */ -export interface DescribeMaintenanceWindowTargetsResult { - /** - *Information about the targets in the maintenance window.
- * @public - */ - Targets?: MaintenanceWindowTarget[]; - - /** - *The token to use when requesting the next set of items. If there are no additional items to - * return, the string is empty.
- * @public - */ - NextToken?: string; -} - -/** - * @public - */ -export interface DescribeMaintenanceWindowTasksRequest { - /** - *The ID of the maintenance window whose tasks should be retrieved.
- * @public - */ - WindowId: string | undefined; - - /** - *Optional filters used to narrow down the scope of the returned tasks. The supported filter
- * keys are WindowTaskId
, TaskArn
, Priority
, and
- * TaskType
.
The maximum number of items to return for this call. The call also returns a token that you - * can specify in a subsequent call to get the next set of results.
- * @public - */ - MaxResults?: number; - - /** - *The token for the next set of items to return. (You received this token from a previous - * call.)
- * @public - */ - NextToken?: string; -} - /** * @internal */ @@ -9597,22 +9719,3 @@ export const DescribeMaintenanceWindowsResultFilterSensitiveLog = (obj: Describe WindowIdentities: obj.WindowIdentities.map((item) => MaintenanceWindowIdentityFilterSensitiveLog(item)), }), }); - -/** - * @internal - */ -export const MaintenanceWindowTargetFilterSensitiveLog = (obj: MaintenanceWindowTarget): any => ({ - ...obj, - ...(obj.OwnerInformation && { OwnerInformation: SENSITIVE_STRING }), - ...(obj.Description && { Description: SENSITIVE_STRING }), -}); - -/** - * @internal - */ -export const DescribeMaintenanceWindowTargetsResultFilterSensitiveLog = ( - obj: DescribeMaintenanceWindowTargetsResult -): any => ({ - ...obj, - ...(obj.Targets && { Targets: obj.Targets.map((item) => MaintenanceWindowTargetFilterSensitiveLog(item)) }), -}); diff --git a/clients/client-ssm/src/models/models_1.ts b/clients/client-ssm/src/models/models_1.ts index 26a357070999..a766415c5eb4 100644 --- a/clients/client-ssm/src/models/models_1.ts +++ b/clients/client-ssm/src/models/models_1.ts @@ -18,6 +18,7 @@ import { ExecutionMode, InstanceAssociationOutputLocation, MaintenanceWindowExecutionStatus, + MaintenanceWindowFilter, MaintenanceWindowResourceType, MaintenanceWindowTaskType, MetadataValue, @@ -39,6 +40,7 @@ import { ResourceTypeForTagging, ReviewStatus, Runbook, + ScheduledWindowExecution, StepExecution, Tag, Target, @@ -47,6 +49,232 @@ import { import { SSMServiceException as __BaseException } from "./SSMServiceException"; +/** + * @public + */ +export interface DescribeMaintenanceWindowScheduleResult { + /** + *Information about maintenance window executions scheduled for the specified time + * range.
+ * @public + */ + ScheduledWindowExecutions?: ScheduledWindowExecution[]; + + /** + *The token for the next set of items to return. (You use this token in the next call.)
+ * @public + */ + NextToken?: string; +} + +/** + * @public + */ +export interface DescribeMaintenanceWindowsForTargetRequest { + /** + *The managed node ID or key-value pair to retrieve information about.
+ * @public + */ + Targets: Target[] | undefined; + + /** + *The type of resource you want to retrieve information about. For example,
+ * INSTANCE
.
The maximum number of items to return for this call. The call also returns a token that you + * can specify in a subsequent call to get the next set of results.
+ * @public + */ + MaxResults?: number; + + /** + *The token for the next set of items to return. (You received this token from a previous + * call.)
+ * @public + */ + NextToken?: string; +} + +/** + *The maintenance window to which the specified target belongs.
+ * @public + */ +export interface MaintenanceWindowIdentityForTarget { + /** + *The ID of the maintenance window.
+ * @public + */ + WindowId?: string; + + /** + *The name of the maintenance window.
+ * @public + */ + Name?: string; +} + +/** + * @public + */ +export interface DescribeMaintenanceWindowsForTargetResult { + /** + *Information about the maintenance window targets and tasks a managed node is associated + * with.
+ * @public + */ + WindowIdentities?: MaintenanceWindowIdentityForTarget[]; + + /** + *The token for the next set of items to return. (You use this token in the next call.)
+ * @public + */ + NextToken?: string; +} + +/** + * @public + */ +export interface DescribeMaintenanceWindowTargetsRequest { + /** + *The ID of the maintenance window whose targets should be retrieved.
+ * @public + */ + WindowId: string | undefined; + + /** + *Optional filters that can be used to narrow down the scope of the returned window targets.
+ * The supported filter keys are Type
, WindowTargetId
, and
+ * OwnerInformation
.
The maximum number of items to return for this call. The call also returns a token that you + * can specify in a subsequent call to get the next set of results.
+ * @public + */ + MaxResults?: number; + + /** + *The token for the next set of items to return. (You received this token from a previous + * call.)
+ * @public + */ + NextToken?: string; +} + +/** + *The target registered with the maintenance window.
+ * @public + */ +export interface MaintenanceWindowTarget { + /** + *The ID of the maintenance window to register the target with.
+ * @public + */ + WindowId?: string; + + /** + *The ID of the target.
+ * @public + */ + WindowTargetId?: string; + + /** + *The type of target that is being registered with the maintenance window.
+ * @public + */ + ResourceType?: MaintenanceWindowResourceType; + + /** + *The targets, either managed nodes or tags.
+ *Specify managed nodes using the following format:
+ *
+ * Key=instanceids,Values=
+ *
Tags are specified using the following format:
+ *
+ * Key=
.
A user-provided value that will be included in any Amazon CloudWatch Events events that are + * raised while running tasks for these targets in this maintenance window.
+ * @public + */ + OwnerInformation?: string; + + /** + *The name for the maintenance window target.
+ * @public + */ + Name?: string; + + /** + *A description for the target.
+ * @public + */ + Description?: string; +} + +/** + * @public + */ +export interface DescribeMaintenanceWindowTargetsResult { + /** + *Information about the targets in the maintenance window.
+ * @public + */ + Targets?: MaintenanceWindowTarget[]; + + /** + *The token to use when requesting the next set of items. If there are no additional items to + * return, the string is empty.
+ * @public + */ + NextToken?: string; +} + +/** + * @public + */ +export interface DescribeMaintenanceWindowTasksRequest { + /** + *The ID of the maintenance window whose tasks should be retrieved.
+ * @public + */ + WindowId: string | undefined; + + /** + *Optional filters used to narrow down the scope of the returned tasks. The supported filter
+ * keys are WindowTaskId
, TaskArn
, Priority
, and
+ * TaskType
.
The maximum number of items to return for this call. The call also returns a token that you + * can specify in a subsequent call to get the next set of results.
+ * @public + */ + MaxResults?: number; + + /** + *The token for the next set of items to return. (You received this token from a previous + * call.)
+ * @public + */ + NextToken?: string; +} + /** * @public * @enum @@ -4616,7 +4844,11 @@ export interface GetParametersRequest { * parameters shared with you from another account, you must use the full ARNs. *To query by parameter label, use "Name": "name:label"
. To query by parameter
* version, use "Name": "name:version"
.
For more information about shared parameters, see Working with
+ * The results for For information about shared parameters, see Working with
* shared parameters in the Amazon Web Services Systems Manager User Guide. The Amazon Resource Name (ARN) of the IAM service role for Amazon Web Services Systems Manager to assume when running a
- * maintenance window task. If you do not specify a service role ARN, Systems Manager uses your account's
- * service-linked role. If no service-linked role for Systems Manager exists in your account, it is created when you run
- * For more information, see Using
- * service-linked roles for Systems Manager in the in the Amazon Web Services Systems Manager User Guide: The Amazon Resource Name (ARN) of the IAM service role for
+ * Amazon Web Services Systems Manager to assume when running a maintenance window task. If you do not specify a
+ * service role ARN, Systems Manager uses a service-linked role in your account. If no
+ * appropriate service-linked role for Systems Manager exists in your account, it is created when
+ * you run However, for an improved security posture, we strongly recommend creating a custom
+ * policy and custom service role for running your maintenance window tasks. The policy
+ * can be crafted to provide only the permissions needed for your particular
+ * maintenance window tasks. For more information, see Setting up maintenance windows in the in the
+ * Amazon Web Services Systems Manager User Guide. Indicates that the Change Manager change template used in the change request was rejected or is
- * still in a pending state. The date and time specified in the change request to run the Automation runbooks. The Automation runbooks specified for the runbook workflow can't run until all required
- * approvals for the change request have been received. The name of the change template document to run during the runbook workflow. The version of the change template document to run during the runbook workflow. A key-value map of parameters that match the declared parameters in the change template
- * document. The name of the change request associated with the runbook workflow to be run. The user-provided idempotency token. The token must be unique, is case insensitive, enforces
- * the UUID format, and can't be reused. Indicates whether the change request can be approved automatically without the need for
- * manual approvals. If Change Calendar restrictions are not bypassed in this scenario. If the state of an
- * associated calendar is Information about the Automation runbooks that are run during the runbook workflow. The Automation runbooks specified for the runbook workflow can't run until all required
- * approvals for the change request have been received. Optional metadata that you assign to a resource. You can specify a maximum of five tags for
- * a change request. Tags enable you to categorize a resource in different ways, such as by
- * purpose, owner, or environment. For example, you might want to tag a change request to identify
- * an environment or target Amazon Web Services Region. In this case, you could specify the following key-value
- * pairs:
- *
- * The time that the requester expects the runbook workflow related to the change request to
- * complete. The time is an estimate only that the requester provides for reviewers. User-provided details about the change. If no details are provided, content specified in the
- * Template information section of the associated change template
- * is added. The unique ID of a runbook workflow operation. (A runbook workflow is a type of Automation
- * operation.) The managed node to connect to for the session. The name of the SSM document you want to use to define the type of session, input
- * parameters, or preferences for the session. For example, The reason for connecting to the instance. This value is included in the details for the
- * Amazon CloudWatch Events event created when you start the session. The values you want to specify for the parameters defined in the Session
- * document. The ID of the session. An encrypted token value containing session and caller information. This token is used to
- * authenticate the connection to the managed node, and is valid only long enough to ensure the
- * connection is successful. Never share your session's token. A URL back to SSM Agent on the managed node that the Session Manager client uses to send commands and
- * receive output from the node. Format:
- * region represents the Region identifier for an
- * Amazon Web Services Region supported by Amazon Web Services Systems Manager, such as
- * session-id represents the ID of a Session Manager session, such as
- * The specified target managed node for the session isn't fully configured for use with Session Manager.
- * For more information, see Getting started with
- * Session Manager in the Amazon Web Services Systems Manager User Guide. This error is also returned if you
- * attempt to start a session on a managed node that is located in a different account or
- * Region The specified update status operation isn't valid. Indicates that the Change Manager change template used in the change request was rejected or is
+ * still in a pending state. The date and time specified in the change request to run the Automation runbooks. The Automation runbooks specified for the runbook workflow can't run until all required
+ * approvals for the change request have been received. The name of the change template document to run during the runbook workflow. The version of the change template document to run during the runbook workflow. A key-value map of parameters that match the declared parameters in the change template
+ * document. The name of the change request associated with the runbook workflow to be run. The user-provided idempotency token. The token must be unique, is case insensitive, enforces
+ * the UUID format, and can't be reused. Indicates whether the change request can be approved automatically without the need for
+ * manual approvals. If Change Calendar restrictions are not bypassed in this scenario. If the state of an
+ * associated calendar is Information about the Automation runbooks that are run during the runbook workflow. The Automation runbooks specified for the runbook workflow can't run until all required
+ * approvals for the change request have been received. Optional metadata that you assign to a resource. You can specify a maximum of five tags for
+ * a change request. Tags enable you to categorize a resource in different ways, such as by
+ * purpose, owner, or environment. For example, you might want to tag a change request to identify
+ * an environment or target Amazon Web Services Region. In this case, you could specify the following key-value
+ * pairs:
+ *
+ * The time that the requester expects the runbook workflow related to the change request to
+ * complete. The time is an estimate only that the requester provides for reviewers. User-provided details about the change. If no details are provided, content specified in the
+ * Template information section of the associated change template
+ * is added. The unique ID of a runbook workflow operation. (A runbook workflow is a type of Automation
+ * operation.) The managed node to connect to for the session. The name of the SSM document you want to use to define the type of session, input
+ * parameters, or preferences for the session. For example, The reason for connecting to the instance. This value is included in the details for the
+ * Amazon CloudWatch Events event created when you start the session. The values you want to specify for the parameters defined in the Session
+ * document. The ID of the session. An encrypted token value containing session and caller information. This token is used to
+ * authenticate the connection to the managed node, and is valid only long enough to ensure the
+ * connection is successful. Never share your session's token. A URL back to SSM Agent on the managed node that the Session Manager client uses to send commands and
+ * receive output from the node. Format:
+ * region represents the Region identifier for an
+ * Amazon Web Services Region supported by Amazon Web Services Systems Manager, such as
+ * session-id represents the ID of a Session Manager session, such as
+ * The specified target managed node for the session isn't fully configured for use with Session Manager.
+ * For more information, see Getting started with
+ * Session Manager in the Amazon Web Services Systems Manager User Guide. This error is also returned if you
+ * attempt to start a session on a managed node that is located in a different account or
+ * Region The specified update status operation isn't valid. The date and time, in ISO-8601 Extended format, for when you want the maintenance window to
* become active. When using a rate schedule, if you provide a start date that occurs in the past, the
+ * current date and time are used as the start date. The Amazon Resource Name (ARN) of the IAM service role for Amazon Web Services Systems Manager to assume when running a
- * maintenance window task. If you do not specify a service role ARN, Systems Manager uses your account's
- * service-linked role. If no service-linked role for Systems Manager exists in your account, it is created when you run
- * For more information, see Using
- * service-linked roles for Systems Manager in the in the Amazon Web Services Systems Manager User Guide: The Amazon Resource Name (ARN) of the IAM service role for
+ * Amazon Web Services Systems Manager to assume when running a maintenance window task. If you do not specify a
+ * service role ARN, Systems Manager uses a service-linked role in your account. If no
+ * appropriate service-linked role for Systems Manager exists in your account, it is created when
+ * you run However, for an improved security posture, we strongly recommend creating a custom
+ * policy and custom service role for running your maintenance window tasks. The policy
+ * can be crafted to provide only the permissions needed for your particular
+ * maintenance window tasks. For more information, see Setting up maintenance windows in the in the
+ * Amazon Web Services Systems Manager User Guide. A name for the SSM document. You can't use the following strings as document name prefixes. These are reserved by Amazon Web Services\n for use as document name prefixes: \n \n \n A name for the SSM document. You can't use the following strings as document name prefixes. These are reserved by Amazon Web Services\n for use as document name prefixes: \n \n \n \n \n \n The date and time, in ISO-8601 Extended format, for when you want the maintenance window to\n become active. The date and time, in ISO-8601 Extended format, for when you want the maintenance window to\n become active. When using a rate schedule, if you provide a start date that occurs in the past, the\n current date and time are used as the start date. An API operation used by the Systems Manager console to display information about Systems Manager managed nodes. An array of instance property filters. The request filters to use with the operator. The maximum number of items to return for the call. The call also returns a token that you\n can specify in a subsequent call to get the next set of results. The token provided by a previous request to use to return the next set of properties. Properties for the managed instances. The token for the next set of properties to return. Use this token to get the next set of\n results. The names or Amazon Resource Names (ARNs) of the parameters that you want to query. For\n parameters shared with you from another account, you must use the full ARNs. To query by parameter label, use For more information about shared parameters, see Working with\n shared parameters in the Amazon Web Services Systems Manager User Guide. The names or Amazon Resource Names (ARNs) of the parameters that you want to query. For\n parameters shared with you from another account, you must use the full ARNs. To query by parameter label, use The results for For information about shared parameters, see Working with\n shared parameters in the Amazon Web Services Systems Manager User Guide. The value of the EC2 The ID of the managed node. The instance type of the managed node. For example, t3.large. The instance profile attached to the node. If an instance profile isn't attached to the node, this value is blank. The name of the key pair associated with the node. If a key pair isnt't associated with the node, this value is blank. The current state of the node. The CPU architecture of the node. For example, x86_64. The public IPv4 address assigned to the node. If a public IPv4 address isn't assigned to the node, this value is blank. The timestamp for when the node was launched. Connection status of the SSM Agent on the managed node. The date and time when the SSM Agent last pinged the Systems Manager service. The version of SSM Agent running on your managed node. The operating system platform type of the managed node. For example, Windows. The name of the operating system platform running on your managed node. The version of the OS platform running on your managed node. The activation ID created by Systems Manager when the server or virtual machine (VM) was registered The IAM role used in the hybrid activation to register the node with Systems Manager. The date the node was registered with Systems Manager. The type of managed node. The fully qualified host name of the managed node. The status of the State Manager association applied to the managed node. The date the association was last run. The last date the association was successfully run. The ID of the source resource. The type of the source resource. An object containing various properties of a managed node. The name of the filter. The filter values. Describes a filter for a specific list of managed nodes. You can filter node information by using tags. You specify tags by using a key-value mapping. The filter key name to describe your managed nodes. The filter key name to describe your managed nodes. The operator used by the filter call. The filters to describe or get information about your managed nodes. The specified filter value isn't valid. The Amazon Resource Name (ARN) of the IAM service role for Amazon Web Services Systems Manager to assume when running a \n maintenance window task. If you do not specify a service role ARN, Systems Manager uses your account's \n service-linked role. If no service-linked role for Systems Manager exists in your account, it is created when you run \n For more information, see Using \n service-linked roles for Systems Manager in the in the Amazon Web Services Systems Manager User Guide: The Amazon Resource Name (ARN) of the IAM service role for\n Amazon Web Services Systems Manager to assume when running a maintenance window task. If you do not specify a\n service role ARN, Systems Manager uses a service-linked role in your account. If no\n appropriate service-linked role for Systems Manager exists in your account, it is created when\n you run However, for an improved security posture, we strongly recommend creating a custom\n policy and custom service role for running your maintenance window tasks. The policy\n can be crafted to provide only the permissions needed for your particular\n maintenance window tasks. For more information, see Setting up maintenance windows in the in the\n Amazon Web Services Systems Manager User Guide. An array of search criteria that targets managed nodes using a key-value pair that you\n specify. One or more targets must be specified for maintenance window Run Command-type tasks.\n Depending on the task, targets are optional for other maintenance window task types (Automation,\n Lambda, and Step Functions). For more information about running tasks\n that don't specify targets, see Registering\n maintenance window tasks without targets in the\n Amazon Web Services Systems Manager User Guide. Supported formats include the following. \n \n \n \n Run Command and Maintenance window targets only:\n \n Maintenance window targets only:\n \n Automation targets only:\n For example: \n \n \n \n Run Command and Maintenance window targets only:\n This example demonstrates how to target all resources in the resource group ProductionResourceGroup in your maintenance window. \n Maintenance window targets only:\n This example demonstrates how to target only Amazon Elastic Compute Cloud (Amazon EC2)\n instances and VPCs in your maintenance window. \n Automation targets only:\n \n State Manager association targets only:\n This example demonstrates how to target all managed instances in the Amazon Web Services Region where\n the association was created. For more information about how to send commands that target managed nodes using\n An array of search criteria that targets managed nodes using a key-value pair that you\n specify. One or more targets must be specified for maintenance window Run Command-type tasks.\n Depending on the task, targets are optional for other maintenance window task types (Automation,\n Lambda, and Step Functions). For more information about running tasks\n that don't specify targets, see Registering\n maintenance window tasks without targets in the\n Amazon Web Services Systems Manager User Guide. Supported formats include the following. \n For all Systems Manager capabilities:\n \n \n For Automation and Change Manager:\n \n \n \n To target all instances in the Amazon Web Services Region: \n \n \n For Run Command and Maintenance Windows:\n \n \n \n Additionally, Maintenance Windows support targeting resource types: \n \n For State Manager:\n \n \n To target all instances in the Amazon Web Services Region: \n For more information about how to send commands that target managed nodes using\n The date and time, in ISO-8601 Extended format, for when you want the maintenance window to\n become active. The date and time, in ISO-8601 Extended format, for when you want the maintenance window to\n become active. When using a rate schedule, if you provide a start date that occurs in the past, the\n current date and time are used as the start date. The Amazon Resource Name (ARN) of the IAM service role for Amazon Web Services Systems Manager to assume when running a \n maintenance window task. If you do not specify a service role ARN, Systems Manager uses your account's \n service-linked role. If no service-linked role for Systems Manager exists in your account, it is created when you run \n For more information, see Using \n service-linked roles for Systems Manager in the in the Amazon Web Services Systems Manager User Guide: The Amazon Resource Name (ARN) of the IAM service role for\n Amazon Web Services Systems Manager to assume when running a maintenance window task. If you do not specify a\n service role ARN, Systems Manager uses a service-linked role in your account. If no\n appropriate service-linked role for Systems Manager exists in your account, it is created when\n you run However, for an improved security posture, we strongly recommend creating a custom\n policy and custom service role for running your maintenance window tasks. The policy\n can be crafted to provide only the permissions needed for your particular\n maintenance window tasks. For more information, see Setting up maintenance windows in the in the\n Amazon Web Services Systems Manager User Guide.GetParameters
requests are listed in alphabetical order in
+ * query responses.RegisterTaskWithMaintenanceWindow
.RegisterTaskWithMaintenanceWindow
.AutoApprovable
is enabled in a change template, then setting
- * AutoApprove
to true
in StartChangeRequestExecution
- * creates a change request that bypasses approver review.CLOSED
, change freeze approvers must still grant permission
- * for this change request to run. If they don't, the change won't be processed until the calendar
- * state is again OPEN
.
- *
- * @public
- */
- Tags?: Tag[];
-
- /**
- * Key=Environment,Value=Production
- * Key=Region,Value=us-east-2
- * SSM-SessionManagerRunShell
.
- * You can call the GetDocument API to verify the document exists before
- * attempting to start a session. If no document name is provided, a shell to the managed node is
- * launched by default. For more information, see Start a
- * session in the Amazon Web Services Systems Manager User Guide.wss://ssmmessages.region.amazonaws.com/v1/data-channel/session-id?stream=(input|output)
- * us-east-2
for the US East (Ohio) Region.
- * For a list of supported region values, see the Region column in Systems Manager service endpoints in the
- * Amazon Web Services General Reference.1a2b3c4dEXAMPLE
.AutoApprovable
is enabled in a change template, then setting
+ * AutoApprove
to true
in StartChangeRequestExecution
+ * creates a change request that bypasses approver review.CLOSED
, change freeze approvers must still grant permission
+ * for this change request to run. If they don't, the change won't be processed until the calendar
+ * state is again OPEN
.
+ *
+ * @public
+ */
+ Tags?: Tag[];
+
+ /**
+ * Key=Environment,Value=Production
+ * Key=Region,Value=us-east-2
+ * SSM-SessionManagerRunShell
.
+ * You can call the GetDocument API to verify the document exists before
+ * attempting to start a session. If no document name is provided, a shell to the managed node is
+ * launched by default. For more information, see Start a
+ * session in the Amazon Web Services Systems Manager User Guide.wss://ssmmessages.region.amazonaws.com/v1/data-channel/session-id?stream=(input|output)
+ * us-east-2
for the US East (Ohio) Region.
+ * For a list of supported region values, see the Region column in Systems Manager service endpoints in the
+ * Amazon Web Services General Reference.1a2b3c4dEXAMPLE
.StartDate
allows you to delay activation of the maintenance window
* until the specified future date.RegisterTaskWithMaintenanceWindow
.RegisterTaskWithMaintenanceWindow
.\n
\n aws
\n amazon
\n amzn
\n \n
\n aws
\n amazon
\n amzn
\n AWSEC2
\n AWSConfigRemediation
\n AWSSupport
\n StartDate
allows you to delay activation of the maintenance window\n until the specified future date.StartDate
allows you to delay activation of the maintenance window\n until the specified future date.\"Name\": \"name:label\"
. To query by parameter\n version, use \"Name\": \"name:version\"
.\"Name\": \"name:label\"
. To query by parameter\n version, use \"Name\": \"name:version\"
.GetParameters
requests are listed in alphabetical order in\n query responses.Name
tag associated with the node. If a Name
tag hasn't been applied to the node, this value is blank.RegisterTaskWithMaintenanceWindow
.RegisterTaskWithMaintenanceWindow
.\n
\n Key=InstanceIds,Values=
\n Key=tag:
\n Key=tag-key,Values=
\n Key=resource-groups:Name,Values=
\n Key=resource-groups:ResourceTypeFilters,Values=
\n Key=ResourceGroup;Values=
\n \n
\n Key=InstanceIds,Values=i-02573cafcfEXAMPLE,i-0471e04240EXAMPLE,i-07782c72faEXAMPLE
\n Key=tag:CostCenter,Values=CostCenter1,CostCenter2,CostCenter3
\n Key=tag-key,Values=Name,Instance-Type,CostCenter
\n Key=resource-groups:Name,Values=ProductionResourceGroup
\n Key=resource-groups:ResourceTypeFilters,Values=AWS::EC2::INSTANCE,AWS::EC2::VPC
\n Key=ResourceGroup,Values=MyResourceGroup
\n Key=InstanceIds,Values=*
\n Key,Value
parameters, see Targeting multiple managed nodes in the Amazon Web Services Systems Manager User Guide.\n
\n Key=tag-key,Values=tag-value-1,tag-value-2
\n \n
\n Key=tag:tag-key,Values=tag-value
\n Key=ResourceGroup,Values=resource-group-name
\n Key=ParameterValues,Values=value-1,value-2,value-3
\n \n
\n Key=AWS::EC2::Instance,Values=*
\n Key=InstanceIds,Values=*
\n \n
\n Key=InstanceIds,Values=instance-id-1,instance-id-2,instance-id-3
\n Key=tag:tag-key,Values=tag-value-1,tag-value-2
\n Key=resource-groups:Name,Values=resource-group-name
\n \n
\n Key=resource-groups:ResourceTypeFilters,Values=resource-type-1,resource-type-2
\n \n
\n Key=InstanceIds,Values=instance-id-1,instance-id-2,instance-id-3
\n Key=tag:tag-key,Values=tag-value-1,tag-value-2
\n \n
\n Key=InstanceIds,Values=*
\n Key,Value
parameters, see Targeting multiple managed nodes in the Amazon Web Services Systems Manager User Guide.StartDate
allows you to delay activation of the maintenance window\n until the specified future date.StartDate
allows you to delay activation of the maintenance window\n until the specified future date.RegisterTaskWithMaintenanceWindow
.RegisterTaskWithMaintenanceWindow
.