terraform 错误 - 未知筛选键 : MSRC_SEVERITY

Question

错误信息

    aws_ssm_patch_baseline.baseline: Modifying... [id=pb-041e9a4a9c8723c10]
    ╷
    │ Error: error updating SSM Patch Baseline (pb-041e9a4a9c8723c10): ValidationException: Unknown Filter Key: MSRC_SEVERITY
    │       status code: 400, request id: b55aa4df-b782-4e40-a3a7-5637ac903bdd
    │
    │   with aws_ssm_patch_baseline.baseline,
    │   on ssm.tf line 1, in resource "aws_ssm_patch_baseline" "baseline":
    │    1: resource "aws_ssm_patch_baseline" "baseline" {```

地形文件内容

    patch_filter {
          key    = "MSRC_SEVERITY"
          values = var.patch_severity
        }

补丁基准的操作系统是 AMAZON_LINUX
对于控制台，可以在下拉字段中选择类似的选项

Answer 1

不同的操作系统支持不同的过滤器属性。不幸的是，AWS 似乎没有确切地告诉您哪些操作系统支持哪些属性，但 the API docs list the valid values属性，然后您可以运行以下命令来检查它们是否对该操作系统有效以及哪些选项可用:

$ aws ssm describe-patch-properties --operating-system AMAZON_LINUX --property MSRC_SEVERITY

An error occurred (ValidationException) when calling the DescribePatchProperties operation: Property MSRC_SEVERITY is not supported for operating system AMAZON_LINUX

$ aws ssm describe-patch-properties --operating-system AMAZON_LINUX --property SEVERITY
{
    "Properties": [
        {
            "Name": "Critical"
        },
        {
            "Name": "Important"
        },
        {
            "Name": "Low"
        },
        {
            "Name": "Medium"
        }
    ]
}

供引用， MSRC is the Microsoft Security Response Center所以这仅适用于 Windows 系统是有道理的。