Create and Get Patch Baselines

Gets the list of patch baselines for a client.

A patch baseline is a collection of patches that are approved for installation on your instances. From a given feed, the user selects a subset of the packages that address the key vulnerabilities. The chosen set of packages form the patch baseline. As a prerequisite, create a patch feed before creating a baseline.

Notes

On using policy based rules for having Filter criteria for dynamic baseline:

• Match type for the rules. Supported value: ALL. Patches which match all the rules in the filter criteria are added to the baseline.
• Filter patches with the following rules:
  • "key": Provide the attributes of a patch.Supported keys: Category, Cve, Rating, Severity
  • "operator" : As listed
  • "Rating" key supports only (Equals, Not Equals) operator with supported values (Whitelisted, Blacklisted)
  • "value"

For example, to filter patches which are whitelisted and are critical, provide the fields as shown below:

"policy": {
  "matchType": "ALL",
  "rules": [
    { "key": "Rating", "operator": "Equals", "value": "Whitelisted" },
    { "key": "Severity", "operator": "Contains", "value": "critical" }
  ]
}