Questions tagged [aws-session-manager]
The aws-session-manager tag has no summary.
7 questions
0 votes
0 answers
181 views
Not able to connect EC2 through session manager
enter image description hereI am not able to connect to EC2 through session manager it's stating that plugin Standard_Stream not found I have expanded the root volume but it's of no use still not ...
1 vote
1 answer
6k views
AWS Security Group Inbound rules for SSM Session Manager
I have an instance in a private subnet and a security group that allows any inbound access. I can connect to it with Session Manager. If I restrict inbound access to port 22 only I can no longer ...
0 votes
1 answer
518 views
Restrict AWS SSM access to SSH only
I need to restrict some users AWS SSM access to SSH only. These users should only be able to start a SSH session via SSM like this: ProxyCommand sh -c "aws ssm start-session --target %h --...
0 votes
1 answer
1k views
Cross Account SSM session: AccessDeniedException
I have two AWS accounts and one role in each account: Account-A have RoleA and Account-B have RoleB. RoleA will assume the RoleB to be able to connect in an EC2 instance in Account-B through ssm start-...
2 votes
2 answers
3k views
Can't use execute-command --interactive in AWS CLI session manager
I'm trying to use the AWS cli + session manager plugin to get into a database container to run some migrations, and I am struggling to get it working. I'm trying to use the following command: aws ecs ...
2 votes
1 answer
4k views
How to restrict AWS SSM access by EC2 tag
https://docs.aws.amazon.com/IAM/latest/UserGuide/list_awssystemsmanager.html#awssystemsmanager-policy-keys I cant find an answer that clears this up for me Im looking at this example: https://docs.aws....
0 votes
0 answers
1k views
How do I poll for when the ssm agent is started and session manager can connect for newly created instances?
I use SSM to connection to windows ec2 instances with the cli: aws ssm start-session --target <id> It takes the ssm service on a windows instance a few mins to start sometimes I can check when ...