AWS managedservices documentation change
Summary
Reorganized and updated fields in daily patch report documentation, including additions of compliance severity counters, instance tags, and maintenance window details. Removed redundant fields and adjusted column ordering.
Security assessment
The changes add documentation for tracking patch compliance severity levels (critical, high, medium, etc.), which is a security-related feature. However, there is no evidence of addressing a specific security vulnerability or incident. The updates improve clarity about security posture monitoring but do not directly resolve a security flaw.
Diff
diff --git a/managedservices/latest/userguide/daily-patch-report.md b/managedservices/latest/userguide/daily-patch-report.md index 25e06ea75..dc75f09e5 100644 --- a//managedservices/latest/userguide/daily-patch-report.md +++ b//managedservices/latest/userguide/daily-patch-report.md @@ -33 +33 @@ This is an informational report that helps identify all the instances onboarded -Report Datetime | dataset_datetime | The date and time the report was generated. +Access Restrictions | access_restrictions | Regions to which access is restricted @@ -37 +36,0 @@ Account Name | account_name | AWS account name -Production Account | prod_account | Identifier of AMS prod, non-prod accounts, depending on whether account name include value 'PROD', 'NONPROD'. @@ -40 +38,0 @@ Account Status | account_status | AMS account status -Landing Zone | malz_flag | Flag for MALZ-related account @@ -42 +40 @@ Account Type | malz_role | MALZ role -Access Restrictions | access_restrictions | Regions to which access is restricted +Auto Scaling Group Name | instance_asg_name | Name of Auto Scaling Group (ASG) that contains the instance @@ -45,5 +42,0 @@ Instance Name | instance_name | Name of EC2 instance -Instance Platform Type | instance_platform_type | Operating System (OS) type -Instance Platform Name | instance_platform_name | Operating System (OS) name -Stack Name | instance_stack_name | Name of stack that contains instance -Stack Type | instance_stack_type | AMS stack (AMS infrastructure within customer account) or Customer stack (AMS managed infrastructure that supports customer applications) -Auto Scaling Group Name | instance_asg_name | Name of Auto Scaling Group (ASG) that contains the instance @@ -51,0 +45,2 @@ Instance Patch Group Type | instance_patch_group_type | Patch group type +Instance Platform Type | instance_platform_type | Operating System (OS) type +Instance Platform Name | instance_platform_name | Operating System (OS) name @@ -52,0 +48,2 @@ Instance State | instance_state | State within the EC2 instance lifecycle +Instance Tags | ec2_tags | The tags associated with the Amazon EC2 instance ID +Landing Zone | malz_flag | Flag for MALZ-related account @@ -55,0 +53,4 @@ Maintenance Window Execution Datetime | earliest_window_execution_time | Next ti +Production Account | prod_account | Identifier of AMS prod, non-prod accounts, depending on whether account name include value 'PROD', 'NONPROD'. +Report Datetime | dataset_datetime | The date and time the report was generated. +Stack Name | instance_stack_name | Name of stack that contains instance +Stack Type | instance_stack_type | AMS stack (AMS infrastructure within customer account) or Customer stack (AMS managed infrastructure that supports customer applications) @@ -76,0 +78,8 @@ Account Name | account_name | AWS account name +Account Status | account_status | AMS account status +Compliant - Critical | compliant_critical | Count of compliant patches with "critical" severity +Compliant - High | compliant_high | Count of compliant patches with "high" severity +Compliant - Medium | compliant_medium | Count of compliant patches with "medium" severity +Compliant - Low | compliant_low | Count of compliant patches with "low" severity +Compliant - Informational | compliant_informational | Count of compliant patches with "informational" severity +Compliant - Unspecified | compliant_unspecified | Count of compliant patches with "unspecified" severity +Compliant - Total | compliant_total | Count of compliant patches (all severities) @@ -79,2 +87,0 @@ Instance Name | instance_name | Name of EC2 instance -Production Account | prod_account | Identifier of AMS prod, non-prod accounts, depending on whether account name include value 'PROD', 'NONPROD'. -Account Status | account_status | AMS account status @@ -84 +90,0 @@ Instance Platform Name | instance_platform_name | Operating System (OS) name -Stack Type | instance_stack_type | AMS stack (AMS infrastructure within customer account) or Customer stack (AMS managed infrastructure that supports customer applications) @@ -87,0 +94,2 @@ Instance State | instance_state | State within the EC2 instance life cycle +Instance Tags | ec2_tags | The tags associated with the Amazon EC2 instance ID +Last Execution Maintenance Window | last_execution_window | The latest time the maintenance window was executed @@ -92,5 +99,0 @@ Maintenance Window Next Execution Datetime | window_next execution_time | Next -Last Execution Maintenance Window | last_execution_window | The latest time the maintenance window was executed -| window_next_exec_yyyy | Year part of window_next_execution_time -| window_next_exec_mm | Month part of window_next_execution_time -| window_next_exec_D | Day part of window_next_execution_time -| window_next _exec_HHMI | Hour:Minute part of window_next_execution_time @@ -99,9 +101,0 @@ Maintenance Window Coverage | mw_covered_flag | If an instance has at least one -Patch Baseline Id | patch_baseline_id | Patch baseline currently attached to instance -Patch Status | patch_status | Overall patch compliance status. If there is at least one missing patch, instance is considered noncompliant, otherwise compliant. -Compliant - Critical | compliant_critical | Count of compliant patches with "critical" severity -Compliant - High | compliant_high | Count of compliant patches with "high" severity -Compliant - Medium | compliant_medium | Count of compliant patches with "medium" severity -Compliant - Low | compliant_low | Count of compliant patches with "low" severity -Compliant - Informational | compliant_informational | Count of compliant patches with "informational" severity -Compliant - Unspecified | compliant_unspecified | Count of compliant patches with "unspecified" severity -Compliant - Total | compliant_total | Count of compliant patches (all severities) @@ -114,0 +109,8 @@ Noncompliant - Total | noncompliant_total | Count of noncompliant patches (all s +Patch Baseline Id | patch_baseline_id | Patch baseline currently attached to instance +Patch Status | patch_status | Overall patch compliance status. If there is at least one missing patch, instance is considered noncompliant, otherwise compliant. +Production Account | prod_account | Identifier of AMS prod, non-prod accounts, depending on whether account name include value 'PROD', 'NONPROD'. +Stack Type | instance_stack_type | AMS stack (AMS infrastructure within customer account) or Customer stack (AMS managed infrastructure that supports customer applications) +| window_next_exec_yyyy | Year part of window_next_execution_time +| window_next_exec_mm | Month part of window_next_execution_time +| window_next_exec_D | Day part of window_next_execution_time +| window_next _exec_HHMI | Hour:Minute part of window_next_execution_time @@ -143,0 +146 @@ Instance State | instance_state | State within the EC2 instance life cycle +Instance Tags | ec2_tags | The tags associated with the Amazon EC2 instance ID