title: How to use pre-defined SSM Windows patch baselines in CloudFormation
body: <p>I'm creating a Systems Manager patch baseline in CloudFormation to automatically apply OS updates for my Windows EC2 instances:</p>
  
  <pre><code>  Windows2016PatchBaseline:
      Type: AWS::SSM::PatchBaseline
      Properties:
        Name: Windows2016PatchBaseline
        Description: Baseline containing all updates approved for Windows 2016 instances
        OperatingSystem: WINDOWS
        PatchGroups:
        - Windows Server 2016 Base   
        ApprovalRules:
          PatchRules:
          - PatchFilterGroup:
              PatchFilters:
              - Values:
                - Critical
                - Important
                - Moderate
                Key: MSRC_SEVERITY
              - Values:
                - SecurityUpdates
                - CriticalUpdates
                Key: CLASSIFICATION
              - Values:
                - WindowsServer2016
                Key: PRODUCT
            ApproveAfterDays: 7
            ComplianceLevel: CRITICAL
  </code></pre>
  
  <p>But, I can see there's a <a href="https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-patch-baselines.html" rel="nofollow noreferrer">predefined baseline</a> that does most of this configuration. I'd like to use this predefined baseline rather than creating my own, but I can't see any way of using it in CloudFormation's <code>AWS::SSM::PatchBaseline</code>.</p>
  
  <p>Has any one done this before or is it possibly only available through the console?</p>