aws ssm create-patch-baseline
Creates a patch baseline. AWS CLI reference
14 options Its page in the AWS CLI reference
Options
--approval-rulesA set of rules used to include patches in the baseline.--approved-patches-compliance-levelDefines the compliance level for approved patches.--approved-patches-enable-non-securityIndicates whether the list of approved patches includes non-security updates that should be applied to the managed nodes.--approved-patchesA list of explicitly approved patches for the baseline.--available-security-updates-compliance-statusIndicates the status you want to assign to security patches that are available but not approved because they don't meet the installation criteria specified in the patch baseline.--client-tokenUser-provided idempotency token.--descriptionA description of the patch baseline.--global-filtersA set of global filters used to include patches in the baseline.--nameThe name of the patch baseline.--operating-systemDefines the operating system the patch baseline applies to.--rejected-patches-actionThe action for Patch Manager to take on patches included in the RejectedPackages list.--rejected-patchesA list of explicitly rejected patches for the baseline.--sourcesInformation about the patches to use to update the managed nodes, including target operating systems and source repositories.--tagsOptional metadata that you assign to a resource.