steampipe plugin install awssteampipe plugin install aws

Table: aws_ssm_maintenance_window

AWS Systems Manager Maintenance Windows let you define a schedule for when to perform potentially disruptive actions on your instances such as patching an operating system, updating drivers, or installing software or patches.

Examples

Basic info

select
  name,
  window_id,
  enabled,
  schedule,
  tags_src,
  region
from
  aws_ssm_maintenance_window;

Get target details for each maintenance window

select
  name,
  p ->> 'WindowTargetId' as window_target_id,
  p ->> 'ResourceType' as resource_type,
  p ->> 'Name' as target_name
from
  aws_ssm_maintenance_window,
  jsonb_array_elements(targets) as p;

Get tasks details for each maintenance window

select
  name,
  p ->> 'WindowTaskId' as window_task_id,
  p ->> 'ServiceRoleArn' as service_role_arn,
  p ->> 'Name' as task_name
from
  aws_ssm_maintenance_window,
  jsonb_array_elements(tasks) as p;

List maintenance windows that are enabled

select
  name,
  window_id,
  enabled
from
  aws_ssm_maintenance_window
where
  enabled;

.inspect aws_ssm_maintenance_window

AWS SSM Maintenance Window

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The AWS Account ID in which the resource is located.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
allow_unassociated_targets	boolean	Indicates whether targets must be registered with the Maintenance Window before tasks can be defined for those targets.
created_date	timestamp with time zone	The date the maintenance window was created.
cutoff	bigint	The number of hours before the end of the Maintenance Window that Systems Manager stops scheduling new tasks for execution.
description	text	A description of the Maintenance Window.
duration	bigint	The duration of the Maintenance Window in hours.
enabled	boolean	Indicates whether the Maintenance Window is enabled.
end_date	text	The date and time, in ISO-8601 Extended format, for when the maintenance window is scheduled to become inactive. The maintenance window will not run after this specified time.
modified_date	timestamp with time zone	The date the Maintenance Window was last modified.
name	text	The name of the Maintenance Window.
next_execution_time	timestamp with time zone	The next time the maintenance window will actually run, taking into account any specified times for the Maintenance Window to become active or inactive.
partition	text	The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
region	text	The AWS Region in which the resource is located.
schedule	text	The schedule of the Maintenance Window in the form of a cron or rate expression.
schedule_offset	bigint	The number of days to wait to run a Maintenance Window after the scheduled CRON expression date and time.
schedule_timezone	text	The schedule of the maintenance window in the form of a cron or rate expression.
start_date	text	The date and time, in ISO-8601 Extended format, for when the maintenance window is scheduled to become active.
tags	jsonb	A map of tags for the resource.
tags_src	jsonb	A list of tags assigned to the Maintenance Window
targets	jsonb	The targets of Maintenance Window.
tasks	jsonb	The Tasks of Maintenance Window.
title	text	Title of the resource.
window_id	text	The ID of the Maintenance Window.

turbot/aws