AWS managedservices documentation change
Summary
Reorganized report columns, added compliance severity breakdowns, instance tags, and maintenance window fields while restructuring field order
Security assessment
Added documentation for tracking patch compliance by severity levels (critical/high/medium/low) which improves visibility into security patching status. However, there is no evidence this change addresses a specific security vulnerability or incident.
Diff
diff --git a/managedservices/latest/accelerate-guide/daily-patch-report.md b/managedservices/latest/accelerate-guide/daily-patch-report.md index e653be433..9be569ccd 100644 --- a//managedservices/latest/accelerate-guide/daily-patch-report.md +++ b//managedservices/latest/accelerate-guide/daily-patch-report.md @@ -37 +37 @@ This is an informational report that helps identify all the instances onboarded -Report Datetime | dataset_datetime | The date and time the report was generated. +Access Restrictions | access_restrictions | Regions to which access is restricted @@ -41 +40,0 @@ Account Name | account_name | AWS account name -Production Account | prod_account | Identifier of AMS prod, non-prod accounts, depending on whether account name include value 'PROD', 'NONPROD'. @@ -44 +42,0 @@ Account Status | account_status | AMS account status -Landing Zone | malz_flag | Flag for MALZ-related account @@ -46 +44 @@ Account Type | malz_role | MALZ role -Access Restrictions | access_restrictions | Regions to which access is restricted +Auto Scaling Group Name | instance_asg_name | Name of Auto Scaling Group (ASG) that contains the instance @@ -49,5 +46,0 @@ Instance Name | instance_name | Name of EC2 instance -Instance Platform Type | instance_platform_type | Operating System (OS) type -Instance Platform Name | instance_platform_name | Operating System (OS) name -Stack Name | instance_stack_name | Name of stack that contains instance -Stack Type | instance_stack_type | AMS stack (AMS infrastructure within customer account) or Customer stack (AMS managed infrastructure that supports customer applications) -Auto Scaling Group Name | instance_asg_name | Name of Auto Scaling Group (ASG) that contains the instance @@ -55,0 +49,2 @@ Instance Patch Group Type | instance_patch_group_type | Patch group type +Instance Platform Type | instance_platform_type | Operating System (OS) type +Instance Platform Name | instance_platform_name | Operating System (OS) name @@ -56,0 +52,2 @@ Instance State | instance_state | State within the EC2 instance lifecycle +Instance Tags | ec2_tags | The tags associated with the Amazon EC2 instance ID +Landing Zone | malz_flag | Flag for MALZ-related account @@ -59,0 +57,4 @@ Maintenance Window Execution Datetime | earliest_window_execution_time | Next ti +Production Account | prod_account | Identifier of AMS prod, non-prod accounts, depending on whether account name include value 'PROD', 'NONPROD'. +Report Datetime | dataset_datetime | The date and time the report was generated. +Stack Name | instance_stack_name | Name of stack that contains instance +Stack Type | instance_stack_type | AMS stack (AMS infrastructure within customer account) or Customer stack (AMS managed infrastructure that supports customer applications) @@ -80,0 +82,8 @@ Account Name | account_name | AWS account name +Account Status | account_status | AMS account status +Compliant - Critical | compliant_critical | Count of compliant patches with "critical" severity +Compliant - High | compliant_high | Count of compliant patches with "high" severity +Compliant - Medium | compliant_medium | Count of compliant patches with "medium" severity +Compliant - Low | compliant_low | Count of compliant patches with "low" severity +Compliant - Informational | compliant_informational | Count of compliant patches with "informational" severity +Compliant - Unspecified | compliant_unspecified | Count of compliant patches with "unspecified" severity +Compliant - Total | compliant_total | Count of compliant patches (all severities) @@ -83,2 +91,0 @@ Instance Name | instance_name | Name of EC2 instance -Production Account | prod_account | Identifier of AMS prod, non-prod accounts, depending on whether account name include value 'PROD', 'NONPROD'. -Account Status | account_status | AMS account status @@ -88 +94,0 @@ Instance Platform Name | instance_platform_name | Operating System (OS) name -Stack Type | instance_stack_type | AMS stack (AMS infrastructure within customer account) or Customer stack (AMS managed infrastructure that supports customer applications) @@ -91,0 +98,2 @@ Instance State | instance_state | State within the EC2 instance life cycle +Instance Tags | ec2_tags | The tags associated with the Amazon EC2 instance ID +Last Execution Maintenance Window | last_execution_window | The latest time the maintenance window was executed @@ -96,5 +103,0 @@ Maintenance Window Next Execution Datetime | window_next execution_time | Next -Last Execution Maintenance Window | last_execution_window | The latest time the maintenance window was executed -| window_next_exec_yyyy | Year part of window_next_execution_time -| window_next_exec_mm | Month part of window_next_execution_time -| window_next_exec_D | Day part of window_next_execution_time -| window_next _exec_HHMI | Hour:Minute part of window_next_execution_time @@ -103,9 +105,0 @@ Maintenance Window Coverage | mw_covered_flag | If an instance has at least one -Patch Baseline Id | patch_baseline_id | Patch baseline currently attached to instance -Patch Status | patch_status | Overall patch compliance status. If there is at least one missing patch, instance is considered noncompliant, otherwise compliant. -Compliant - Critical | compliant_critical | Count of compliant patches with "critical" severity -Compliant - High | compliant_high | Count of compliant patches with "high" severity -Compliant - Medium | compliant_medium | Count of compliant patches with "medium" severity -Compliant - Low | compliant_low | Count of compliant patches with "low" severity -Compliant - Informational | compliant_informational | Count of compliant patches with "informational" severity -Compliant - Unspecified | compliant_unspecified | Count of compliant patches with "unspecified" severity -Compliant - Total | compliant_total | Count of compliant patches (all severities) @@ -118,0 +113,8 @@ Noncompliant - Total | noncompliant_total | Count of noncompliant patches (all s +Patch Baseline Id | patch_baseline_id | Patch baseline currently attached to instance +Patch Status | patch_status | Overall patch compliance status. If there is at least one missing patch, instance is considered noncompliant, otherwise compliant. +Production Account | prod_account | Identifier of AMS prod, non-prod accounts, depending on whether account name include value 'PROD', 'NONPROD'. +Stack Type | instance_stack_type | AMS stack (AMS infrastructure within customer account) or Customer stack (AMS managed infrastructure that supports customer applications) +| window_next_exec_yyyy | Year part of window_next_execution_time +| window_next_exec_mm | Month part of window_next_execution_time +| window_next_exec_D | Day part of window_next_execution_time +| window_next _exec_HHMI | Hour:Minute part of window_next_execution_time @@ -147,0 +150 @@ Instance State | instance_state | State within the EC2 instance life cycle +Instance Tags | ec2_tags | The tags associated with the Amazon EC2 instance ID