AwsSsmComplianceSummary ¶

class AwsSsmComplianceSummary(TypedDict, closed=True):
    status: NotRequired["capo_securityhub.types.non_empty_string.NonEmptyString"]
    """<p>The current patch compliance status. Valid values are as follows:</p> <ul> <li> <p> <code>COMPLIANT</code> </p> </li> <li> <p> <code>NON_COMPLIANT</code> </p> </li> <li> <p> <code>UNSPECIFIED_DATA</code> </p> </li> </ul>"""
    compliant_critical_count: NotRequired["capo_securityhub.types.integer.Integer"]
    """<p>For the patches that are compliant, the number that have a severity of <code>CRITICAL</code>.</p>"""
    compliant_high_count: NotRequired["capo_securityhub.types.integer.Integer"]
    """<p>For the patches that are compliant, the number that have a severity of <code>HIGH</code>.</p>"""
    compliant_medium_count: NotRequired["capo_securityhub.types.integer.Integer"]
    """<p>For the patches that are compliant, the number that have a severity of <code>MEDIUM</code>.</p>"""
    execution_type: NotRequired[
        "capo_securityhub.types.non_empty_string.NonEmptyString"
    ]
    """<p>The type of execution that was used determine compliance.</p>"""
    non_compliant_critical_count: NotRequired["capo_securityhub.types.integer.Integer"]
    """<p>For the patch items that are noncompliant, the number of items that have a severity of <code>CRITICAL</code>.</p>"""
    compliant_informational_count: NotRequired["capo_securityhub.types.integer.Integer"]
    """<p>For the patches that are compliant, the number that have a severity of <code>INFORMATIONAL</code>.</p>"""
    non_compliant_informational_count: NotRequired[
        "capo_securityhub.types.integer.Integer"
    ]
    """<p>For the patches that are noncompliant, the number that have a severity of <code>INFORMATIONAL</code>.</p>"""
    compliant_unspecified_count: NotRequired["capo_securityhub.types.integer.Integer"]
    """<p>For the patches that are compliant, the number that have a severity of <code>UNSPECIFIED</code>.</p>"""
    non_compliant_low_count: NotRequired["capo_securityhub.types.integer.Integer"]
    """<p>For the patches that are noncompliant, the number that have a severity of <code>LOW</code>.</p>"""
    non_compliant_high_count: NotRequired["capo_securityhub.types.integer.Integer"]
    """<p>For the patches that are noncompliant, the number that have a severity of <code>HIGH</code>.</p>"""
    compliant_low_count: NotRequired["capo_securityhub.types.integer.Integer"]
    """<p>For the patches that are compliant, the number that have a severity of <code>LOW</code>.</p>"""
    compliance_type: NotRequired[
        "capo_securityhub.types.non_empty_string.NonEmptyString"
    ]
    """<p>The type of resource for which the compliance was determined. For <code>AwsSsmPatchCompliance</code>, <code>ComplianceType</code> is <code>Patch</code>. </p>"""
    patch_baseline_id: NotRequired[
        "capo_securityhub.types.non_empty_string.NonEmptyString"
    ]
    """<p>The identifier of the patch baseline. The patch baseline lists the patches that are approved for installation.</p>"""
    overall_severity: NotRequired[
        "capo_securityhub.types.non_empty_string.NonEmptyString"
    ]
    """<p>The highest severity for the patches. Valid values are as follows:</p> <ul> <li> <p> <code>CRITICAL</code> </p> </li> <li> <p> <code>HIGH</code> </p> </li> <li> <p> <code>MEDIUM</code> </p> </li> <li> <p> <code>LOW</code> </p> </li> <li> <p> <code>INFORMATIONAL</code> </p> </li> <li> <p> <code>UNSPECIFIED</code> </p> </li> </ul>"""
    non_compliant_medium_count: NotRequired["capo_securityhub.types.integer.Integer"]
    """<p>For the patches that are noncompliant, the number that have a severity of <code>MEDIUM</code>.</p>"""
    non_compliant_unspecified_count: NotRequired[
        "capo_securityhub.types.integer.Integer"
    ]
    """<p>For the patches that are noncompliant, the number that have a severity of <code>UNSPECIFIED</code>.</p>"""
    patch_group: NotRequired["capo_securityhub.types.non_empty_string.NonEmptyString"]
    """<p>The identifier of the patch group for which compliance was determined. A patch group uses tags to group EC2 instances that should have the same patch compliance.</p>"""