aws ssm describe-patch-group-state
Returns high-level aggregated patch compliance state information for a patch group. AWS CLI reference
1 example 1 option Its page in the AWS CLI reference
Examples
To get the state of a patch group
The following describe-patch-group-state example retrieves the high-level patch compliance summary for a patch group.
aws ssm describe-patch-group-state --patch-group "Production"Identify--patch-groupThe name of the patch group whose patch snapshot should be retrieved.Its output
{
"Instances": 21,
"InstancesWithCriticalNonCompliantPatches": 1,
"InstancesWithFailedPatches": 2,
"InstancesWithInstalledOtherPatches": 3,
"InstancesWithInstalledPatches": 21,
"InstancesWithInstalledPendingRebootPatches": 2,
"InstancesWithInstalledRejectedPatches": 1,
"InstancesWithMissingPatches": 3,
"InstancesWithNotApplicablePatches": 4,
"InstancesWithOtherNonCompliantPatches": 1,
"InstancesWithSecurityNonCompliantPatches": 1,
"InstancesWithUnreportedNotApplicablePatches": 2
}For more information, see About patch groups <https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-patch-patchgroups.html>__ and Understanding patch compliance state values in the AWS Systems Manager User Guide.
Options
--patch-groupThe name of the patch group whose patch snapshot should be retrieved.