Questions tagged [aws-ssm]

AWS Systems Manager (formerly Amazon EC2 Systems Manager) is a unified interface that allows you to easily centralize operational data and automate tasks across your AWS resources.

AWS Systems Manager is a agent that can be installed and run on EC2 instances allow has various capabilities like running commands on these EC2 instances, help push data to Cloudwatch etc. Do take a look at http://docs.aws.amazon.com/systems-manager/latest/userguide/what-is-systems-manager.html for more info.

645 questions
5
votes
1 answer

Can't get configuration profile of AppConfig from AWS Lambda function

Lambda function - Node.js const AWS = require('aws-sdk') exports.handler = async (event) => { var appconfig = new AWS.AppConfig({ apiVersion: '2019-10-09' }) var params = { ApplicationId: '6xeris1', ConfigurationProfileId: '0ck2ijf' …
Kim-Jimin
  • 674
  • 2
  • 9
  • 19
5
votes
0 answers

Performance issues while accessing parameter store from lambda using Java AWS SDK Vs NodeJS AWS SDK

I am trying to access SSM parameter store from lambda. I have noticed major difference in performance when parameter is fetched from lambda based on Java AWS SDK Vs lambda based on NodeJS AWS SDK. For java based lambda - to retrieve first parameter…
Guru
  • 964
  • 9
  • 12
5
votes
1 answer

Can AWS System Manager login as ec2-user

I have an EC2 instance that's typically used via manually sshing onto the box as ec2-user. Over time the box has accrued various custom configurations such as docker config and git access to our private repositories. Am trying to automate some…
Adam Hughes
  • 14,601
  • 12
  • 83
  • 122
5
votes
2 answers

How to add password parameter field without showing values via cloudformation?

I will be taking few inputs when i'm creating the cloudformation stack. Cloudformation stack will create a SSM document (AWS systems manager) and I want to give password as an input parameter to the SSM document before the execution. "parameters":…
5
votes
1 answer

AWS Systems Manager - Session Manager and Run Command "document process failed unexpectedly"

I'm using sessions Manager/Run Command to access some of my instances and it works for some instances and not for others. I have the same configuration for a few instances, same security groups, IAM role, agents installed with the same agent…
MillerC
  • 663
  • 1
  • 11
  • 26
5
votes
2 answers

Is it possible to use SSM parameters in environment variables for a lambda?

I know in Cloudformation you can create Parameters using SSM, but I really want to know if you can use SSM in environment variables for a lambda. I know I can put the SSM paths and use the sdk in the code to get those values, but maybe there is a…
Leandro
  • 870
  • 2
  • 13
  • 27
5
votes
1 answer

Way to reference SSM in different region in serverless framwork

Serverless offers a function to access SSM. ${ssm:/parameter-path} However, It seems only to allow access to SSM(parameter) in the same region. Is there way to reference SSM in a different region? Sometimes there are parameters globally used. For…
SangminKim
  • 8,358
  • 14
  • 69
  • 125
5
votes
1 answer

AWS ssm:SendCommand with SNS - restrictive IAM policy

I'm attempting to create a restrictive SSM role IAM policy that is able to send SNS notifications on failure of SendCommand command executions. I currently have the following policy that gives me "AccessDenied" with no other information…
4
votes
1 answer

Pasting multi line text in AWS SSM connection

I have used both AWS SSM on the web UI and also installing the SSM plugin on my terminal (Using MacOS Monterrey Terminal) and on both I have the same odd behaviour when pasting multi-line text: My source text: "Lorem ipsum dolor sit amet,…
damuz91
  • 1,461
  • 2
  • 21
  • 37
4
votes
1 answer

AWS SSM Run Command without keeping in history

I am trying to reset AD password of users using AWS SSM. The only issue with this approach is that the SSM run command keeps a history of run. This history shows the parameters in clear text, which can be an issue with Security. Is there any way I…
Mervin Hemaraju
  • 1,921
  • 2
  • 22
  • 71
4
votes
1 answer

AWS SSM DOcument Assume Role is unable to be assumed for Service Catalog

I am using Service Catalog to execute the SSM Automation Document, so my Service Catalog has its own Role called "My_END_USER_Role", and I've created another role with permission to stop the EC2 for SSM Automation Document. My_END_USER_Role this…
4
votes
2 answers

AWS Parameter Store IAM policies are not working correctly

I need some help related to creating AWS policies. I need a policy linked to an EC2 instance to be able to give only a get-parameters-by-path to a specific parameter in AWS SSM parameter store, without being able to change anything like Delete,…
4
votes
0 answers

aws ssm session - how do I set "runAsDefaultuser" to be a interactive parameter when starting a session

I'm trying to create a document that I call and specific my IAM user as the user to connect with. This document will be a shared document that has a parameter "runAsDefaultuser". It will default to a user that doesn't exist. This will force me to…
4
votes
1 answer

aws ssm proxycommand for interactive session

Goal: Log into ec2 instance via SSM to an ssh terminal using a proxycommand I can log into my instance fine using 'aws ssm start-session --target intance-id'. However to make life simpler, I want to be able to have a proxycommand in my .ssh/config…
gregs
  • 605
  • 2
  • 7
  • 16
4
votes
3 answers

CDK and automation of inserting secure string parameters into ssm parameter store?

So I found out that you can't use CloudFormation to insert a parameter that needs to be secured with a KMS Key into Secure Parameter Store. Obviously, you can use the cli, but that has huge drawbacks when it comes to doing multiple insert secure…
1 2
3
42 43