Questions tagged [amazon-systems-manager]

AWS Systems Manager (formerly Amazon EC2 Systems Manager) is a unified interface that allows you to easily centralize operational data and automate tasks across your AWS resources

AWS SSM has an Agent that can be installed on your EC2 instances and allows your to do things like run commands, monitor and upload logs to Cloudwatch. Do take a look at http://docs.aws.amazon.com/systems-manager/latest/userguide/what-is-systems-manager.html for more info.

76 questions
14
votes
7 answers

How to export parameters from aws parameter store and import into another account

on my first aws account I have parameters specified in the following manner: /config/a => value1 /config/b => value2 /config/c/a => value31 /config/c/b => value32 I want to move these to my second aws account. I created these parameters in the…
12
votes
5 answers

Cloudformation & Parameter Store: How to select parameter for the environment

I want to read the URL of my database from parameter store in my CloudFormation template. This is easy enough for a single URL, but I can't figure out how to change the URL with different environments. I have four environments (development,…
8
votes
3 answers

Can cloudformation SSM dynamic reference with type StringList resolve to list?

Dynamic references to SSM parameters are supported within cloudformation templates https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references.html The documentation states that you can Use the ssm dynamic reference to include…
ekcrisp
  • 1,967
  • 1
  • 18
  • 26
8
votes
2 answers

Accessing Parameter Store from VPC / Lambda

My lambda function can access Systems Manager parameters (ssm.getParameter) when NOT in a VPC. When I add the lambda function to my VPC, I lose access to SSM. The function times out. Clearly I am missing a security group setting or something but…
Fook
  • 5,320
  • 7
  • 35
  • 57
5
votes
3 answers

AWS SAM & Parameter Store: How to select parameter for the deployment into different environments

I have a setup where I am using CodeCommit as my repository to store lambda functions and CodePipeline using AWS SAM to deploy and create lambda functions. I would like to deploy the lambda functions into different environments such as QA, staging,…
5
votes
3 answers

How to run command on EC2 instance after starting session manager on it using bash script?

I am writing bash script to install missing patches on ec2 instance using session manager. I can start the session using script but I am not sure how can I run command on it using script? instanceid = "i-098xxxx" echo $instanceid echo…
5
votes
1 answer

how to auto update AWS windows EC2 instances when updates become available

I am working with AWS EC2 windows instances and my goal is to associate them with a maintenance window or a patch baseline (I'm not sure which one) to schedule an automation that, when updates for the instance become available it automatically…
jelidens
  • 221
  • 1
  • 4
  • 14
4
votes
1 answer

AWS SSM Run Command without keeping in history

I am trying to reset AD password of users using AWS SSM. The only issue with this approach is that the SSM run command keeps a history of run. This history shows the parameters in clear text, which can be an issue with Security. Is there any way I…
Mervin Hemaraju
  • 1,921
  • 2
  • 22
  • 71
4
votes
4 answers

Why does AWS CloudWatch encrypted log groups breaks session manager?

Recently attached a key from AWS KMS to encrypt CloudWatch log groups for AWS Systems Manager Session Manager. Now I can't connect to any session. What is this error and how to fix? Your session has been terminated for the following reasons: …
4
votes
1 answer

How to establish AWs Systems Manager PortForwarding session? Unknown session type Port

I'm trying to do a POC of AWS Systems Manager Session Manager Port Forwarding session but I can't seem to be able to start the PortForwarding session even though starting a normal session works. A session starts and works as intended aws ssm…
3
votes
2 answers

How to download a file using from s3 private bucket without AWS cli

Is it possible to download a file from AWS s3 without AWS cli? In my production server I would need to download a config file which is in S3 bucket. I was thinking of having Amazon Systems Manger run a script that would download the config (YAML…
kumar
  • 8,207
  • 20
  • 85
  • 176
3
votes
1 answer

CloudWatch Events Rule not finding EC2 targets using tags

I have a CloudWatch Event Rule that will trigger an SSM Run Command Document. The targets will be identified using tags. My resources are defined according to the following CloudFormation template: SSMRunCommandDocument: Type: AWS::SSM::Document …
3
votes
1 answer

Build ASP.NET Core 2.2 Docker Image with AWS Systems Manager Parameter Store

Setup Windows 10 Visual Studio Professional 2017 Docker CE v 2.0.0.3 ASP.NET Core 2.2 PowerShell v6.1.0 I'm using the AWS Systems Manager Parameter Store to hold an encrypted connection string for my ASP.NET app. I found this extension to…
GreenyMcDuff
  • 3,292
  • 7
  • 34
  • 66
3
votes
0 answers

How to check if a parameter exists in Systems Manager from CloudFormation

Reading the AWS documentation here, I've found the following statement: AWS::SSM::Parameter::Name The name of a Systems Manager parameter key. Use this parameter when you want to pass the parameter key. For example, you can use this type to…
3
votes
1 answer

Change/Add Name of Managed Instance after Activation in Systems Manager

I have been setting up Amazon EC2 Systems Manager in order to manage our Windows patch management setup. All looking good so far as we can get the on premises servers listed in the console using the activation. I have activated the following…
John Fox
  • 747
  • 1
  • 13
  • 28
1
2 3 4 5 6