[Improvement] ec2/* - Optional MaintenanceWindow (#591)

widdix · Oct 26, 2021 · 5213c3d · 5213c3d
1 parent 4749ff1
commit 5213c3d
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 2 deletions.
diff --git a/ec2/al2-mutable-private.yaml b/ec2/al2-mutable-private.yaml
@@ -176,7 +176,7 @@ Parameters:
     MinValue: 8
     MaxValue: 1024
   MaintenanceWindowSchedule:
-    Description: 'SSM cron expressions to trigger the maintenace window for patch installation.'
+    Description: 'SSM cron expressions to trigger the maintenace window for patch installation (leave empty to disable).'
     Type: String
     Default: 'cron(0 5 ? * SUN *)'
   MaintenanceWindowScheduleTimezone:
@@ -692,6 +692,7 @@ Conditions:
   HasManagedPolicyArns: !Not [!Equals [!Ref ManagedPolicyArns, '']]
   HasBackupRetentionPeriod: !Not [!Equals [!Ref BackupRetentionPeriod, 0]]
   HasRestoreImageId: !Not [!Equals [!Ref RestoreImageId, '']]
+  HasMaintenanceWindowSchedule: !Not [!Equals [!Ref MaintenanceWindowSchedule, '']]
 Resources:
   RecordSet:
     Condition: HasZone
@@ -1215,6 +1216,7 @@ Resources:
       - Name: path
         Value: '/'
   MaintenanceWindow:
+    Condition: HasMaintenanceWindowSchedule
     Type: 'AWS::SSM::MaintenanceWindow'
     Properties:
       AllowUnassociatedTargets: false
@@ -1224,6 +1226,7 @@ Resources:
       Schedule: !Ref MaintenanceWindowSchedule
       ScheduleTimezone: !Ref MaintenanceWindowScheduleTimezone
   MaintenanceWindowTarget:
+    Condition: HasMaintenanceWindowSchedule
     Type: 'AWS::SSM::MaintenanceWindowTarget'
     Properties:
       ResourceType: INSTANCE
@@ -1232,6 +1235,7 @@ Resources:
         Values: [!Ref VirtualMachine]
       WindowId: !Ref MaintenanceWindow
   MaintenanceWindowTask:
+    Condition: HasMaintenanceWindowSchedule
     Type: 'AWS::SSM::MaintenanceWindowTask'
     Properties:
       MaxConcurrency: '1'

diff --git a/ec2/al2-mutable-public.yaml b/ec2/al2-mutable-public.yaml
@@ -176,7 +176,7 @@ Parameters:
     MinValue: 8
     MaxValue: 1024
   MaintenanceWindowSchedule:
-    Description: 'SSM cron expressions to trigger the maintenace window for patch installation.'
+    Description: 'SSM cron expressions to trigger the maintenace window for patch installation (leave empty to disable).'
     Type: String
     Default: 'cron(0 5 ? * SUN *)'
   MaintenanceWindowScheduleTimezone:
@@ -692,6 +692,7 @@ Conditions:
   HasManagedPolicyArns: !Not [!Equals [!Ref ManagedPolicyArns, '']]
   HasBackupRetentionPeriod: !Not [!Equals [!Ref BackupRetentionPeriod, 0]]
   HasRestoreImageId: !Not [!Equals [!Ref RestoreImageId, '']]
+  HasMaintenanceWindowSchedule: !Not [!Equals [!Ref MaintenanceWindowSchedule, '']]
 Resources:
   RecordSet:
     Condition: HasZone
@@ -1225,6 +1226,7 @@ Resources:
       - Name: path
         Value: '/'
   MaintenanceWindow:
+    Condition: HasMaintenanceWindowSchedule
     Type: 'AWS::SSM::MaintenanceWindow'
     Properties:
       AllowUnassociatedTargets: false
@@ -1234,6 +1236,7 @@ Resources:
       Schedule: !Ref MaintenanceWindowSchedule
       ScheduleTimezone: !Ref MaintenanceWindowScheduleTimezone
   MaintenanceWindowTarget:
+    Condition: HasMaintenanceWindowSchedule
     Type: 'AWS::SSM::MaintenanceWindowTarget'
     Properties:
       ResourceType: INSTANCE
@@ -1242,6 +1245,7 @@ Resources:
         Values: [!Ref VirtualMachine]
       WindowId: !Ref MaintenanceWindow
   MaintenanceWindowTask:
+    Condition: HasMaintenanceWindowSchedule
     Type: 'AWS::SSM::MaintenanceWindowTask'
     Properties:
       MaxConcurrency: '1'