AWS Systems Managerインベントリはどのアプリケーション情報を収集しているのか調べてみた

[
・・・（中略）・・・

    {
        "typeName" : "AWS:Application",
        "version": "1.1",
        "attributes":[
            { "name": "Name", "dataType": "STRING"},
            { "name": "ApplicationType", "dataType": "STRING"},
            { "name": "Publisher", "dataType": "STRING"},
            { "name": "Version", "dataType": "STRING"},
            { "name": "InstalledTime", "dataType": "STRING"},
            { "name": "Architecture", "dataType": "STRING"},
            { "name": "URL", "dataType": "STRING"},
            { "name": "Summary", "dataType": "STRING"},
            { "name": "PackageId", "dataType": "STRING"},
            { "name": "Release", "dataType": "STRING"},
            { "name": "Epoch", "dataType": "STRING"}
        ]
    },

・・・（後略）・・・
]

// dataProvider_windows.go 114行目付近より抜粋

/*
Note:

We get list of installed apps by using powershell to query registry from 2 locations:

Path-1 => HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\*
Path-2 => HKLM:\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*

Path-2 is used to get a list of 32 bit apps running on a 64 bit OS (when 64bit agent is running on 64bit OS)
For all other scenarios we use Path-1 to get the list of installed apps.
Reference: https://msdn.microsoft.com/en-us/library/windows/desktop/ms724072(v=vs.85).aspx

・・・（後略）・・・
*/

// dataProvider_unix.go 75行目付近より抜粋

// collectPlatformDependentApplicationData collects all application data from the system using rpm or dpkg query.
func collectPlatformDependentApplicationData(context context.T) (appData []model.ApplicationData) {

    var err error
    log := context.Log()

    args := []string{dpkgArgsToGetAllApplications, dpkgQueryFormat}
    cmd := dpkgCmd

    // try dpkg first, if any error occurs, use rpm
    if appData, err = getApplicationData(context, cmd, args); err != nil {
        log.Info("Getting applications information using dpkg failed, trying rpm now")
        cmd = rpmCmd
        args = []string{rpmCmdArgToGetAllApplications, rpmQueryFormat, rpmQueryFormatArgs}
        if appData, err = getApplicationData(context, cmd, args); err != nil {
            log.Errorf("Unable to detect package manager - hence no inventory data for %v", GathererName)
        }
    }

    return
}

# StableバージョンはMSIインストーラーでインストール(自作スクリプト)
Set-ExecutionPolicy Bypass -Scope Process -Force; [Net.ServicePointManager]::SecurityProtocol=[Net.ServicePointManager]::SecurityProtocol -bor [Net.SecurityProtocolType]::Tls12
iex ((New-Object System.Net.WebClient).DownloadString('https://raw.githubusercontent.com/stknohg/PSCoreUpdate/master/FirstTimeInstaller/Install-LatestPowerShell.ps1'))

# PreviewバージョンはZipでインストール (※Preview版もMSIでインストールできます)
cd ~
Invoke-WebRequest -Uri https://github.com/PowerShell/PowerShell/releases/download/v6.2.0-rc.1/PowerShell-6.2.0-rc.1-win-x64.zip -OutFile .\PowerShell-6.2.0-rc.1-win-x64.zip
Expand-Archive -LiteralPath .\PowerShell-6.2.0-rc.1-win-x64.zip -DestinationPath 'C:\Program Files\PowerShell\6-preview'

# StableバージョンはYum(rpm)でインストール
curl https://packages.microsoft.com/config/rhel/7/prod.repo | sudo tee /etc/yum.repos.d/microsoft.repo
sudo yum install -y powershell

# PreviewバージョンはZipでインストール (※Preview版もYumからインストールできます)
cd ~
curl -LO https://github.com/PowerShell/PowerShell/releases/download/v6.2.0-rc.1/powershell-6.2.0-rc.1-linux-x64.tar.gz
sodu mkdir /opt/microsoft/powershell/6-preview
cd /opt/microsoft/powershell/6-preview
sudo tar -xzvf ~/powershell-6.2.0-rc.1-linux-x64.tar.gz
sudo chmod 755 ./pwsh
sudo ln -s /opt/microsoft/powershell/6-preview/pwsh /usr/bin/pwsh-preview

# クエリが雑なのは許してほしい...
select name, packageid, version, resourceid
  from aws_application
 where lower(name) like 'powershell%'
 order by packageid