github.com/pulumi/pulumi-aws/sdk/v6@v6.32.0/go/aws/ssm/patchBaseline.go

// Code generated by the Pulumi Terraform Bridge (tfgen) Tool DO NOT EDIT.
// *** WARNING: Do not edit by hand unless you're certain you know what you are doing! ***

package ssm

import (
	"context"
	"reflect"

	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/internal"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

// Provides an SSM Patch Baseline resource.
//
// > **NOTE on Patch Baselines:** The `approvedPatches` and `approvalRule` are
// both marked as optional fields, but the Patch Baseline requires that at least one
// of them is specified.
//
// ## Example Usage
//
// ### Basic Usage
//
// Using `approvedPatches` only.
//
// <!--Start PulumiCodeChooser -->
// ```go
// package main
//
// import (
//
//	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/ssm"
//	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
//
// )
//
//	func main() {
//		pulumi.Run(func(ctx *pulumi.Context) error {
//			_, err := ssm.NewPatchBaseline(ctx, "production", &ssm.PatchBaselineArgs{
//				Name: pulumi.String("patch-baseline"),
//				ApprovedPatches: pulumi.StringArray{
//					pulumi.String("KB123456"),
//				},
//			})
//			if err != nil {
//				return err
//			}
//			return nil
//		})
//	}
//
// ```
// <!--End PulumiCodeChooser -->
//
// ### Advanced Usage, specifying patch filters
//
// <!--Start PulumiCodeChooser -->
// ```go
// package main
//
// import (
//
//	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/ssm"
//	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
//
// )
//
//	func main() {
//		pulumi.Run(func(ctx *pulumi.Context) error {
//			_, err := ssm.NewPatchBaseline(ctx, "production", &ssm.PatchBaselineArgs{
//				Name:        pulumi.String("patch-baseline"),
//				Description: pulumi.String("Patch Baseline Description"),
//				ApprovedPatches: pulumi.StringArray{
//					pulumi.String("KB123456"),
//					pulumi.String("KB456789"),
//				},
//				RejectedPatches: pulumi.StringArray{
//					pulumi.String("KB987654"),
//				},
//				GlobalFilters: ssm.PatchBaselineGlobalFilterArray{
//					&ssm.PatchBaselineGlobalFilterArgs{
//						Key: pulumi.String("PRODUCT"),
//						Values: pulumi.StringArray{
//							pulumi.String("WindowsServer2008"),
//						},
//					},
//					&ssm.PatchBaselineGlobalFilterArgs{
//						Key: pulumi.String("CLASSIFICATION"),
//						Values: pulumi.StringArray{
//							pulumi.String("ServicePacks"),
//						},
//					},
//					&ssm.PatchBaselineGlobalFilterArgs{
//						Key: pulumi.String("MSRC_SEVERITY"),
//						Values: pulumi.StringArray{
//							pulumi.String("Low"),
//						},
//					},
//				},
//				ApprovalRules: ssm.PatchBaselineApprovalRuleArray{
//					&ssm.PatchBaselineApprovalRuleArgs{
//						ApproveAfterDays: pulumi.Int(7),
//						ComplianceLevel:  pulumi.String("HIGH"),
//						PatchFilters: ssm.PatchBaselineApprovalRulePatchFilterArray{
//							&ssm.PatchBaselineApprovalRulePatchFilterArgs{
//								Key: pulumi.String("PRODUCT"),
//								Values: pulumi.StringArray{
//									pulumi.String("WindowsServer2016"),
//								},
//							},
//							&ssm.PatchBaselineApprovalRulePatchFilterArgs{
//								Key: pulumi.String("CLASSIFICATION"),
//								Values: pulumi.StringArray{
//									pulumi.String("CriticalUpdates"),
//									pulumi.String("SecurityUpdates"),
//									pulumi.String("Updates"),
//								},
//							},
//							&ssm.PatchBaselineApprovalRulePatchFilterArgs{
//								Key: pulumi.String("MSRC_SEVERITY"),
//								Values: pulumi.StringArray{
//									pulumi.String("Critical"),
//									pulumi.String("Important"),
//									pulumi.String("Moderate"),
//								},
//							},
//						},
//					},
//					&ssm.PatchBaselineApprovalRuleArgs{
//						ApproveAfterDays: pulumi.Int(7),
//						PatchFilters: ssm.PatchBaselineApprovalRulePatchFilterArray{
//							&ssm.PatchBaselineApprovalRulePatchFilterArgs{
//								Key: pulumi.String("PRODUCT"),
//								Values: pulumi.StringArray{
//									pulumi.String("WindowsServer2012"),
//								},
//							},
//						},
//					},
//				},
//			})
//			if err != nil {
//				return err
//			}
//			return nil
//		})
//	}
//
// ```
// <!--End PulumiCodeChooser -->
//
// ### Advanced usage, specifying Microsoft application and Windows patch rules
//
// <!--Start PulumiCodeChooser -->
// ```go
// package main
//
// import (
//
//	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/ssm"
//	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
//
// )
//
//	func main() {
//		pulumi.Run(func(ctx *pulumi.Context) error {
//			_, err := ssm.NewPatchBaseline(ctx, "windows_os_apps", &ssm.PatchBaselineArgs{
//				Name:            pulumi.String("WindowsOSAndMicrosoftApps"),
//				Description:     pulumi.String("Patch both Windows and Microsoft apps"),
//				OperatingSystem: pulumi.String("WINDOWS"),
//				ApprovalRules: ssm.PatchBaselineApprovalRuleArray{
//					&ssm.PatchBaselineApprovalRuleArgs{
//						ApproveAfterDays: pulumi.Int(7),
//						PatchFilters: ssm.PatchBaselineApprovalRulePatchFilterArray{
//							&ssm.PatchBaselineApprovalRulePatchFilterArgs{
//								Key: pulumi.String("CLASSIFICATION"),
//								Values: pulumi.StringArray{
//									pulumi.String("CriticalUpdates"),
//									pulumi.String("SecurityUpdates"),
//								},
//							},
//							&ssm.PatchBaselineApprovalRulePatchFilterArgs{
//								Key: pulumi.String("MSRC_SEVERITY"),
//								Values: pulumi.StringArray{
//									pulumi.String("Critical"),
//									pulumi.String("Important"),
//								},
//							},
//						},
//					},
//					&ssm.PatchBaselineApprovalRuleArgs{
//						ApproveAfterDays: pulumi.Int(7),
//						PatchFilters: ssm.PatchBaselineApprovalRulePatchFilterArray{
//							&ssm.PatchBaselineApprovalRulePatchFilterArgs{
//								Key: pulumi.String("PATCH_SET"),
//								Values: pulumi.StringArray{
//									pulumi.String("APPLICATION"),
//								},
//							},
//							&ssm.PatchBaselineApprovalRulePatchFilterArgs{
//								Key: pulumi.String("PRODUCT"),
//								Values: pulumi.StringArray{
//									pulumi.String("Office 2013"),
//									pulumi.String("Office 2016"),
//								},
//							},
//						},
//					},
//				},
//			})
//			if err != nil {
//				return err
//			}
//			return nil
//		})
//	}
//
// ```
// <!--End PulumiCodeChooser -->
//
// ### Advanced usage, specifying alternate patch source repository
//
// <!--Start PulumiCodeChooser -->
// ```go
// package main
//
// import (
//
//	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/ssm"
//	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
//
// )
//
//	func main() {
//		pulumi.Run(func(ctx *pulumi.Context) error {
//			_, err := ssm.NewPatchBaseline(ctx, "al_2017_09", &ssm.PatchBaselineArgs{
//				ApprovalRules: ssm.PatchBaselineApprovalRuleArray{
//					nil,
//				},
//				Name:            pulumi.String("Amazon-Linux-2017.09"),
//				Description:     pulumi.String("My patch repository for Amazon Linux 2017.09"),
//				OperatingSystem: pulumi.String("AMAZON_LINUX"),
//				Sources: ssm.PatchBaselineSourceArray{
//					&ssm.PatchBaselineSourceArgs{
//						Name: pulumi.String("My-AL2017.09"),
//						Products: pulumi.StringArray{
//							pulumi.String("AmazonLinux2017.09"),
//						},
//						Configuration: pulumi.String(`[amzn-main]
//
// name=amzn-main-Base
// mirrorlist=http://repo./$awsregion./$awsdomain//$releasever/main/mirror.list
// mirrorlist_expire=300
// metadata_expire=300
// priority=10
// failovermethod=priority
// fastestmirror_enabled=0
// gpgcheck=1
// gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-amazon-ga
// enabled=1
// retries=3
// timeout=5
// report_instanceid=yes
// `),
//
//					},
//				},
//			})
//			if err != nil {
//				return err
//			}
//			return nil
//		})
//	}
//
// ```
// <!--End PulumiCodeChooser -->
//
// ## Import
//
// Using `pulumi import`, import SSM Patch Baselines using their baseline ID. For example:
//
// ```sh
// $ pulumi import aws:ssm/patchBaseline:PatchBaseline example pb-12345678
// ```
type PatchBaseline struct {
	pulumi.CustomResourceState

	// Set of rules used to include patches in the baseline. Up to 10 approval rules can be specified. See `approvalRule` below.
	ApprovalRules PatchBaselineApprovalRuleArrayOutput `pulumi:"approvalRules"`
	// List of explicitly approved patches for the baseline. Cannot be specified with `approvalRule`.
	ApprovedPatches pulumi.StringArrayOutput `pulumi:"approvedPatches"`
	// Compliance level for approved patches. This means that if an approved patch is reported as missing, this is the severity of the compliance violation. Valid values are `CRITICAL`, `HIGH`, `MEDIUM`, `LOW`, `INFORMATIONAL`, `UNSPECIFIED`. The default value is `UNSPECIFIED`.
	ApprovedPatchesComplianceLevel pulumi.StringPtrOutput `pulumi:"approvedPatchesComplianceLevel"`
	// Whether the list of approved patches includes non-security updates that should be applied to the instances. Applies to Linux instances only.
	ApprovedPatchesEnableNonSecurity pulumi.BoolPtrOutput `pulumi:"approvedPatchesEnableNonSecurity"`
	// ARN of the baseline.
	Arn pulumi.StringOutput `pulumi:"arn"`
	// Description of the patch baseline.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Set of global filters used to exclude patches from the baseline. Up to 4 global filters can be specified using Key/Value pairs. Valid Keys are `PRODUCT`, `CLASSIFICATION`, `MSRC_SEVERITY`, and `PATCH_ID`.
	GlobalFilters PatchBaselineGlobalFilterArrayOutput `pulumi:"globalFilters"`
	// JSON definition of the baseline.
	Json pulumi.StringOutput `pulumi:"json"`
	// Name of the patch baseline.
	//
	// The following arguments are optional:
	Name pulumi.StringOutput `pulumi:"name"`
	// Operating system the patch baseline applies to. Valid values are `ALMA_LINUX`, `AMAZON_LINUX`, `AMAZON_LINUX_2`, `AMAZON_LINUX_2022`, `AMAZON_LINUX_2023`, `CENTOS`, `DEBIAN`, `MACOS`, `ORACLE_LINUX`, `RASPBIAN`, `REDHAT_ENTERPRISE_LINUX`, `ROCKY_LINUX`, `SUSE`, `UBUNTU`, and `WINDOWS`. The default value is `WINDOWS`.
	OperatingSystem pulumi.StringPtrOutput `pulumi:"operatingSystem"`
	// List of rejected patches.
	RejectedPatches pulumi.StringArrayOutput `pulumi:"rejectedPatches"`
	// Action for Patch Manager to take on patches included in the `rejectedPatches` list. Valid values are `ALLOW_AS_DEPENDENCY` and `BLOCK`.
	RejectedPatchesAction pulumi.StringOutput `pulumi:"rejectedPatchesAction"`
	// Configuration block with alternate sources for patches. Applies to Linux instances only. See `source` below.
	Sources PatchBaselineSourceArrayOutput `pulumi:"sources"`
	// Map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	//
	// Deprecated: Please use `tags` instead.
	TagsAll pulumi.StringMapOutput `pulumi:"tagsAll"`
}

// NewPatchBaseline registers a new resource with the given unique name, arguments, and options.
func NewPatchBaseline(ctx *pulumi.Context,
	name string, args *PatchBaselineArgs, opts ...pulumi.ResourceOption) (*PatchBaseline, error) {
	if args == nil {
		args = &PatchBaselineArgs{}
	}

	opts = internal.PkgResourceDefaultOpts(opts)
	var resource PatchBaseline
	err := ctx.RegisterResource("aws:ssm/patchBaseline:PatchBaseline", name, args, &resource, opts...)
	if err != nil {
		return nil, err
	}
	return &resource, nil
}

// GetPatchBaseline gets an existing PatchBaseline resource's state with the given name, ID, and optional
// state properties that are used to uniquely qualify the lookup (nil if not required).
func GetPatchBaseline(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *PatchBaselineState, opts ...pulumi.ResourceOption) (*PatchBaseline, error) {
	var resource PatchBaseline
	err := ctx.ReadResource("aws:ssm/patchBaseline:PatchBaseline", name, id, state, &resource, opts...)
	if err != nil {
		return nil, err
	}
	return &resource, nil
}

// Input properties used for looking up and filtering PatchBaseline resources.
type patchBaselineState struct {
	// Set of rules used to include patches in the baseline. Up to 10 approval rules can be specified. See `approvalRule` below.
	ApprovalRules []PatchBaselineApprovalRule `pulumi:"approvalRules"`
	// List of explicitly approved patches for the baseline. Cannot be specified with `approvalRule`.
	ApprovedPatches []string `pulumi:"approvedPatches"`
	// Compliance level for approved patches. This means that if an approved patch is reported as missing, this is the severity of the compliance violation. Valid values are `CRITICAL`, `HIGH`, `MEDIUM`, `LOW`, `INFORMATIONAL`, `UNSPECIFIED`. The default value is `UNSPECIFIED`.
	ApprovedPatchesComplianceLevel *string `pulumi:"approvedPatchesComplianceLevel"`
	// Whether the list of approved patches includes non-security updates that should be applied to the instances. Applies to Linux instances only.
	ApprovedPatchesEnableNonSecurity *bool `pulumi:"approvedPatchesEnableNonSecurity"`
	// ARN of the baseline.
	Arn *string `pulumi:"arn"`
	// Description of the patch baseline.
	Description *string `pulumi:"description"`
	// Set of global filters used to exclude patches from the baseline. Up to 4 global filters can be specified using Key/Value pairs. Valid Keys are `PRODUCT`, `CLASSIFICATION`, `MSRC_SEVERITY`, and `PATCH_ID`.
	GlobalFilters []PatchBaselineGlobalFilter `pulumi:"globalFilters"`
	// JSON definition of the baseline.
	Json *string `pulumi:"json"`
	// Name of the patch baseline.
	//
	// The following arguments are optional:
	Name *string `pulumi:"name"`
	// Operating system the patch baseline applies to. Valid values are `ALMA_LINUX`, `AMAZON_LINUX`, `AMAZON_LINUX_2`, `AMAZON_LINUX_2022`, `AMAZON_LINUX_2023`, `CENTOS`, `DEBIAN`, `MACOS`, `ORACLE_LINUX`, `RASPBIAN`, `REDHAT_ENTERPRISE_LINUX`, `ROCKY_LINUX`, `SUSE`, `UBUNTU`, and `WINDOWS`. The default value is `WINDOWS`.
	OperatingSystem *string `pulumi:"operatingSystem"`
	// List of rejected patches.
	RejectedPatches []string `pulumi:"rejectedPatches"`
	// Action for Patch Manager to take on patches included in the `rejectedPatches` list. Valid values are `ALLOW_AS_DEPENDENCY` and `BLOCK`.
	RejectedPatchesAction *string `pulumi:"rejectedPatchesAction"`
	// Configuration block with alternate sources for patches. Applies to Linux instances only. See `source` below.
	Sources []PatchBaselineSource `pulumi:"sources"`
	// Map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags map[string]string `pulumi:"tags"`
	// Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	//
	// Deprecated: Please use `tags` instead.
	TagsAll map[string]string `pulumi:"tagsAll"`
}

type PatchBaselineState struct {
	// Set of rules used to include patches in the baseline. Up to 10 approval rules can be specified. See `approvalRule` below.
	ApprovalRules PatchBaselineApprovalRuleArrayInput
	// List of explicitly approved patches for the baseline. Cannot be specified with `approvalRule`.
	ApprovedPatches pulumi.StringArrayInput
	// Compliance level for approved patches. This means that if an approved patch is reported as missing, this is the severity of the compliance violation. Valid values are `CRITICAL`, `HIGH`, `MEDIUM`, `LOW`, `INFORMATIONAL`, `UNSPECIFIED`. The default value is `UNSPECIFIED`.
	ApprovedPatchesComplianceLevel pulumi.StringPtrInput
	// Whether the list of approved patches includes non-security updates that should be applied to the instances. Applies to Linux instances only.
	ApprovedPatchesEnableNonSecurity pulumi.BoolPtrInput
	// ARN of the baseline.
	Arn pulumi.StringPtrInput
	// Description of the patch baseline.
	Description pulumi.StringPtrInput
	// Set of global filters used to exclude patches from the baseline. Up to 4 global filters can be specified using Key/Value pairs. Valid Keys are `PRODUCT`, `CLASSIFICATION`, `MSRC_SEVERITY`, and `PATCH_ID`.
	GlobalFilters PatchBaselineGlobalFilterArrayInput
	// JSON definition of the baseline.
	Json pulumi.StringPtrInput
	// Name of the patch baseline.
	//
	// The following arguments are optional:
	Name pulumi.StringPtrInput
	// Operating system the patch baseline applies to. Valid values are `ALMA_LINUX`, `AMAZON_LINUX`, `AMAZON_LINUX_2`, `AMAZON_LINUX_2022`, `AMAZON_LINUX_2023`, `CENTOS`, `DEBIAN`, `MACOS`, `ORACLE_LINUX`, `RASPBIAN`, `REDHAT_ENTERPRISE_LINUX`, `ROCKY_LINUX`, `SUSE`, `UBUNTU`, and `WINDOWS`. The default value is `WINDOWS`.
	OperatingSystem pulumi.StringPtrInput
	// List of rejected patches.
	RejectedPatches pulumi.StringArrayInput
	// Action for Patch Manager to take on patches included in the `rejectedPatches` list. Valid values are `ALLOW_AS_DEPENDENCY` and `BLOCK`.
	RejectedPatchesAction pulumi.StringPtrInput
	// Configuration block with alternate sources for patches. Applies to Linux instances only. See `source` below.
	Sources PatchBaselineSourceArrayInput
	// Map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
	// Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	//
	// Deprecated: Please use `tags` instead.
	TagsAll pulumi.StringMapInput
}

func (PatchBaselineState) ElementType() reflect.Type {
	return reflect.TypeOf((*patchBaselineState)(nil)).Elem()
}

type patchBaselineArgs struct {
	// Set of rules used to include patches in the baseline. Up to 10 approval rules can be specified. See `approvalRule` below.
	ApprovalRules []PatchBaselineApprovalRule `pulumi:"approvalRules"`
	// List of explicitly approved patches for the baseline. Cannot be specified with `approvalRule`.
	ApprovedPatches []string `pulumi:"approvedPatches"`
	// Compliance level for approved patches. This means that if an approved patch is reported as missing, this is the severity of the compliance violation. Valid values are `CRITICAL`, `HIGH`, `MEDIUM`, `LOW`, `INFORMATIONAL`, `UNSPECIFIED`. The default value is `UNSPECIFIED`.
	ApprovedPatchesComplianceLevel *string `pulumi:"approvedPatchesComplianceLevel"`
	// Whether the list of approved patches includes non-security updates that should be applied to the instances. Applies to Linux instances only.
	ApprovedPatchesEnableNonSecurity *bool `pulumi:"approvedPatchesEnableNonSecurity"`
	// Description of the patch baseline.
	Description *string `pulumi:"description"`
	// Set of global filters used to exclude patches from the baseline. Up to 4 global filters can be specified using Key/Value pairs. Valid Keys are `PRODUCT`, `CLASSIFICATION`, `MSRC_SEVERITY`, and `PATCH_ID`.
	GlobalFilters []PatchBaselineGlobalFilter `pulumi:"globalFilters"`
	// Name of the patch baseline.
	//
	// The following arguments are optional:
	Name *string `pulumi:"name"`
	// Operating system the patch baseline applies to. Valid values are `ALMA_LINUX`, `AMAZON_LINUX`, `AMAZON_LINUX_2`, `AMAZON_LINUX_2022`, `AMAZON_LINUX_2023`, `CENTOS`, `DEBIAN`, `MACOS`, `ORACLE_LINUX`, `RASPBIAN`, `REDHAT_ENTERPRISE_LINUX`, `ROCKY_LINUX`, `SUSE`, `UBUNTU`, and `WINDOWS`. The default value is `WINDOWS`.
	OperatingSystem *string `pulumi:"operatingSystem"`
	// List of rejected patches.
	RejectedPatches []string `pulumi:"rejectedPatches"`
	// Action for Patch Manager to take on patches included in the `rejectedPatches` list. Valid values are `ALLOW_AS_DEPENDENCY` and `BLOCK`.
	RejectedPatchesAction *string `pulumi:"rejectedPatchesAction"`
	// Configuration block with alternate sources for patches. Applies to Linux instances only. See `source` below.
	Sources []PatchBaselineSource `pulumi:"sources"`
	// Map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags map[string]string `pulumi:"tags"`
}

// The set of arguments for constructing a PatchBaseline resource.
type PatchBaselineArgs struct {
	// Set of rules used to include patches in the baseline. Up to 10 approval rules can be specified. See `approvalRule` below.
	ApprovalRules PatchBaselineApprovalRuleArrayInput
	// List of explicitly approved patches for the baseline. Cannot be specified with `approvalRule`.
	ApprovedPatches pulumi.StringArrayInput
	// Compliance level for approved patches. This means that if an approved patch is reported as missing, this is the severity of the compliance violation. Valid values are `CRITICAL`, `HIGH`, `MEDIUM`, `LOW`, `INFORMATIONAL`, `UNSPECIFIED`. The default value is `UNSPECIFIED`.
	ApprovedPatchesComplianceLevel pulumi.StringPtrInput
	// Whether the list of approved patches includes non-security updates that should be applied to the instances. Applies to Linux instances only.
	ApprovedPatchesEnableNonSecurity pulumi.BoolPtrInput
	// Description of the patch baseline.
	Description pulumi.StringPtrInput
	// Set of global filters used to exclude patches from the baseline. Up to 4 global filters can be specified using Key/Value pairs. Valid Keys are `PRODUCT`, `CLASSIFICATION`, `MSRC_SEVERITY`, and `PATCH_ID`.
	GlobalFilters PatchBaselineGlobalFilterArrayInput
	// Name of the patch baseline.
	//
	// The following arguments are optional:
	Name pulumi.StringPtrInput
	// Operating system the patch baseline applies to. Valid values are `ALMA_LINUX`, `AMAZON_LINUX`, `AMAZON_LINUX_2`, `AMAZON_LINUX_2022`, `AMAZON_LINUX_2023`, `CENTOS`, `DEBIAN`, `MACOS`, `ORACLE_LINUX`, `RASPBIAN`, `REDHAT_ENTERPRISE_LINUX`, `ROCKY_LINUX`, `SUSE`, `UBUNTU`, and `WINDOWS`. The default value is `WINDOWS`.
	OperatingSystem pulumi.StringPtrInput
	// List of rejected patches.
	RejectedPatches pulumi.StringArrayInput
	// Action for Patch Manager to take on patches included in the `rejectedPatches` list. Valid values are `ALLOW_AS_DEPENDENCY` and `BLOCK`.
	RejectedPatchesAction pulumi.StringPtrInput
	// Configuration block with alternate sources for patches. Applies to Linux instances only. See `source` below.
	Sources PatchBaselineSourceArrayInput
	// Map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
}

func (PatchBaselineArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*patchBaselineArgs)(nil)).Elem()
}

type PatchBaselineInput interface {
	pulumi.Input

	ToPatchBaselineOutput() PatchBaselineOutput
	ToPatchBaselineOutputWithContext(ctx context.Context) PatchBaselineOutput
}

func (*PatchBaseline) ElementType() reflect.Type {
	return reflect.TypeOf((**PatchBaseline)(nil)).Elem()
}

func (i *PatchBaseline) ToPatchBaselineOutput() PatchBaselineOutput {
	return i.ToPatchBaselineOutputWithContext(context.Background())
}

func (i *PatchBaseline) ToPatchBaselineOutputWithContext(ctx context.Context) PatchBaselineOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PatchBaselineOutput)
}

// PatchBaselineArrayInput is an input type that accepts PatchBaselineArray and PatchBaselineArrayOutput values.
// You can construct a concrete instance of `PatchBaselineArrayInput` via:
//
//	PatchBaselineArray{ PatchBaselineArgs{...} }
type PatchBaselineArrayInput interface {
	pulumi.Input

	ToPatchBaselineArrayOutput() PatchBaselineArrayOutput
	ToPatchBaselineArrayOutputWithContext(context.Context) PatchBaselineArrayOutput
}

type PatchBaselineArray []PatchBaselineInput

func (PatchBaselineArray) ElementType() reflect.Type {
	return reflect.TypeOf((*[]*PatchBaseline)(nil)).Elem()
}

func (i PatchBaselineArray) ToPatchBaselineArrayOutput() PatchBaselineArrayOutput {
	return i.ToPatchBaselineArrayOutputWithContext(context.Background())
}

func (i PatchBaselineArray) ToPatchBaselineArrayOutputWithContext(ctx context.Context) PatchBaselineArrayOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PatchBaselineArrayOutput)
}

// PatchBaselineMapInput is an input type that accepts PatchBaselineMap and PatchBaselineMapOutput values.
// You can construct a concrete instance of `PatchBaselineMapInput` via:
//
//	PatchBaselineMap{ "key": PatchBaselineArgs{...} }
type PatchBaselineMapInput interface {
	pulumi.Input

	ToPatchBaselineMapOutput() PatchBaselineMapOutput
	ToPatchBaselineMapOutputWithContext(context.Context) PatchBaselineMapOutput
}

type PatchBaselineMap map[string]PatchBaselineInput

func (PatchBaselineMap) ElementType() reflect.Type {
	return reflect.TypeOf((*map[string]*PatchBaseline)(nil)).Elem()
}

func (i PatchBaselineMap) ToPatchBaselineMapOutput() PatchBaselineMapOutput {
	return i.ToPatchBaselineMapOutputWithContext(context.Background())
}

func (i PatchBaselineMap) ToPatchBaselineMapOutputWithContext(ctx context.Context) PatchBaselineMapOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PatchBaselineMapOutput)
}

type PatchBaselineOutput struct{ *pulumi.OutputState }

func (PatchBaselineOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**PatchBaseline)(nil)).Elem()
}

func (o PatchBaselineOutput) ToPatchBaselineOutput() PatchBaselineOutput {
	return o
}

func (o PatchBaselineOutput) ToPatchBaselineOutputWithContext(ctx context.Context) PatchBaselineOutput {
	return o
}

// Set of rules used to include patches in the baseline. Up to 10 approval rules can be specified. See `approvalRule` below.
func (o PatchBaselineOutput) ApprovalRules() PatchBaselineApprovalRuleArrayOutput {
	return o.ApplyT(func(v *PatchBaseline) PatchBaselineApprovalRuleArrayOutput { return v.ApprovalRules }).(PatchBaselineApprovalRuleArrayOutput)
}

// List of explicitly approved patches for the baseline. Cannot be specified with `approvalRule`.
func (o PatchBaselineOutput) ApprovedPatches() pulumi.StringArrayOutput {
	return o.ApplyT(func(v *PatchBaseline) pulumi.StringArrayOutput { return v.ApprovedPatches }).(pulumi.StringArrayOutput)
}

// Compliance level for approved patches. This means that if an approved patch is reported as missing, this is the severity of the compliance violation. Valid values are `CRITICAL`, `HIGH`, `MEDIUM`, `LOW`, `INFORMATIONAL`, `UNSPECIFIED`. The default value is `UNSPECIFIED`.
func (o PatchBaselineOutput) ApprovedPatchesComplianceLevel() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *PatchBaseline) pulumi.StringPtrOutput { return v.ApprovedPatchesComplianceLevel }).(pulumi.StringPtrOutput)
}

// Whether the list of approved patches includes non-security updates that should be applied to the instances. Applies to Linux instances only.
func (o PatchBaselineOutput) ApprovedPatchesEnableNonSecurity() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v *PatchBaseline) pulumi.BoolPtrOutput { return v.ApprovedPatchesEnableNonSecurity }).(pulumi.BoolPtrOutput)
}

// ARN of the baseline.
func (o PatchBaselineOutput) Arn() pulumi.StringOutput {
	return o.ApplyT(func(v *PatchBaseline) pulumi.StringOutput { return v.Arn }).(pulumi.StringOutput)
}

// Description of the patch baseline.
func (o PatchBaselineOutput) Description() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *PatchBaseline) pulumi.StringPtrOutput { return v.Description }).(pulumi.StringPtrOutput)
}

// Set of global filters used to exclude patches from the baseline. Up to 4 global filters can be specified using Key/Value pairs. Valid Keys are `PRODUCT`, `CLASSIFICATION`, `MSRC_SEVERITY`, and `PATCH_ID`.
func (o PatchBaselineOutput) GlobalFilters() PatchBaselineGlobalFilterArrayOutput {
	return o.ApplyT(func(v *PatchBaseline) PatchBaselineGlobalFilterArrayOutput { return v.GlobalFilters }).(PatchBaselineGlobalFilterArrayOutput)
}

// JSON definition of the baseline.
func (o PatchBaselineOutput) Json() pulumi.StringOutput {
	return o.ApplyT(func(v *PatchBaseline) pulumi.StringOutput { return v.Json }).(pulumi.StringOutput)
}

// Name of the patch baseline.
//
// The following arguments are optional:
func (o PatchBaselineOutput) Name() pulumi.StringOutput {
	return o.ApplyT(func(v *PatchBaseline) pulumi.StringOutput { return v.Name }).(pulumi.StringOutput)
}

// Operating system the patch baseline applies to. Valid values are `ALMA_LINUX`, `AMAZON_LINUX`, `AMAZON_LINUX_2`, `AMAZON_LINUX_2022`, `AMAZON_LINUX_2023`, `CENTOS`, `DEBIAN`, `MACOS`, `ORACLE_LINUX`, `RASPBIAN`, `REDHAT_ENTERPRISE_LINUX`, `ROCKY_LINUX`, `SUSE`, `UBUNTU`, and `WINDOWS`. The default value is `WINDOWS`.
func (o PatchBaselineOutput) OperatingSystem() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *PatchBaseline) pulumi.StringPtrOutput { return v.OperatingSystem }).(pulumi.StringPtrOutput)
}

// List of rejected patches.
func (o PatchBaselineOutput) RejectedPatches() pulumi.StringArrayOutput {
	return o.ApplyT(func(v *PatchBaseline) pulumi.StringArrayOutput { return v.RejectedPatches }).(pulumi.StringArrayOutput)
}

// Action for Patch Manager to take on patches included in the `rejectedPatches` list. Valid values are `ALLOW_AS_DEPENDENCY` and `BLOCK`.
func (o PatchBaselineOutput) RejectedPatchesAction() pulumi.StringOutput {
	return o.ApplyT(func(v *PatchBaseline) pulumi.StringOutput { return v.RejectedPatchesAction }).(pulumi.StringOutput)
}

// Configuration block with alternate sources for patches. Applies to Linux instances only. See `source` below.
func (o PatchBaselineOutput) Sources() PatchBaselineSourceArrayOutput {
	return o.ApplyT(func(v *PatchBaseline) PatchBaselineSourceArrayOutput { return v.Sources }).(PatchBaselineSourceArrayOutput)
}

// Map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
func (o PatchBaselineOutput) Tags() pulumi.StringMapOutput {
	return o.ApplyT(func(v *PatchBaseline) pulumi.StringMapOutput { return v.Tags }).(pulumi.StringMapOutput)
}

// Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
//
// Deprecated: Please use `tags` instead.
func (o PatchBaselineOutput) TagsAll() pulumi.StringMapOutput {
	return o.ApplyT(func(v *PatchBaseline) pulumi.StringMapOutput { return v.TagsAll }).(pulumi.StringMapOutput)
}

type PatchBaselineArrayOutput struct{ *pulumi.OutputState }

func (PatchBaselineArrayOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*[]*PatchBaseline)(nil)).Elem()
}

func (o PatchBaselineArrayOutput) ToPatchBaselineArrayOutput() PatchBaselineArrayOutput {
	return o
}

func (o PatchBaselineArrayOutput) ToPatchBaselineArrayOutputWithContext(ctx context.Context) PatchBaselineArrayOutput {
	return o
}

func (o PatchBaselineArrayOutput) Index(i pulumi.IntInput) PatchBaselineOutput {
	return pulumi.All(o, i).ApplyT(func(vs []interface{}) *PatchBaseline {
		return vs[0].([]*PatchBaseline)[vs[1].(int)]
	}).(PatchBaselineOutput)
}

type PatchBaselineMapOutput struct{ *pulumi.OutputState }

func (PatchBaselineMapOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*map[string]*PatchBaseline)(nil)).Elem()
}

func (o PatchBaselineMapOutput) ToPatchBaselineMapOutput() PatchBaselineMapOutput {
	return o
}

func (o PatchBaselineMapOutput) ToPatchBaselineMapOutputWithContext(ctx context.Context) PatchBaselineMapOutput {
	return o
}

func (o PatchBaselineMapOutput) MapIndex(k pulumi.StringInput) PatchBaselineOutput {
	return pulumi.All(o, k).ApplyT(func(vs []interface{}) *PatchBaseline {
		return vs[0].(map[string]*PatchBaseline)[vs[1].(string)]
	}).(PatchBaselineOutput)
}

func init() {
	pulumi.RegisterInputType(reflect.TypeOf((*PatchBaselineInput)(nil)).Elem(), &PatchBaseline{})
	pulumi.RegisterInputType(reflect.TypeOf((*PatchBaselineArrayInput)(nil)).Elem(), PatchBaselineArray{})
	pulumi.RegisterInputType(reflect.TypeOf((*PatchBaselineMapInput)(nil)).Elem(), PatchBaselineMap{})
	pulumi.RegisterOutputType(PatchBaselineOutput{})
	pulumi.RegisterOutputType(PatchBaselineArrayOutput{})
	pulumi.RegisterOutputType(PatchBaselineMapOutput{})
}