text 编写Systems Manager合规性项目

Posted 2021-04-30

$managedInstanceId = (Get-Content -Path 'C:\ProgramData\Amazon\SSM\InstanceData\Vault\Store\RegistrationKey' -Raw | ConvertFrom-Json).instanceID
$moduleNames = @(
    'AWSPowerShell',
    'ClipboardText',
    'Convert',
    'PSWindowsUpdate'
)

$complianceItems = [System.Collections.Generic.List[Amazon.SimpleSystemsManagement.Model.ComplianceItemEntry]]::new()
foreach ($moduleName in $moduleNames)
{
    $module = Get-Module -Name $moduleName -ListAvailable | Sort-Object -Property Version -Descending | Select-Object -First 1

    $item = [Amazon.SimpleSystemsManagement.Model.ComplianceItemEntry]::new()
    $item.Id = $module.Version.ToString()
    $item.Severity = [Amazon.SimpleSystemsManagement.ComplianceSeverity]::INFORMATIONAL
    $item.Status = [Amazon.SimpleSystemsManagement.ComplianceStatus]::COMPLIANT
    $item.Title = $moduleName

    $null = $complianceItems.Add($item)
}

$writeSSMComplianceItem = @{
    ComplianceType = 'Custom:PowerShellModule'
    ResourceId = $managedInstanceId
    ResourceType = 'ManagedInstance'
    Item = $complianceItems
    ExecutionSummary_ExecutionTime = Get-Date
    ExecutionSummary_ExecutionType = 'Command'
}
Write-SSMComplianceItem @writeSSMComplianceItem