=
=
https://us-east-1.console.aws.amazon.com/systems-manager/session-manager/start-session?region=us-east-1
https://us-east-1.console.aws.amazon.com/iam/home?region=us-east-1#/roles
https://us-east-1.console.aws.amazon.com/ec2/home?region=us-east-1#Instances:
without login into application we can run the commands
https://us-east-1.console.aws.amazon.com/systems-manager/run-command/send-command?region=us-east-1
parameter store
store the parmaters and call programatically
https://us-east-1.console.aws.amazon.com/systems-manager/parameters/aws/create?region=us-east-1
https://us-east-1.console.aws.amazon.com/systems-manager/parameters/aws/create?region=us-east-1
using this we are going to parementer
get instance logs
https://us-east-1.console.aws.amazon.com/ec2/home?region=us-east-1#InstanceAudit:instanceId=i-06975bd10c1a175f8;initialTabId=system-log
once role asocciated showing session
https://us-east-1.console.aws.amazon.com/systems-manager/session-manager/start-session?region=us-east-1
we can start session like this
in this session we can see
which ssm is doing the activities
https://us-east-1.console.aws.amazon.com/systems-manager/session-manager/i-06975bd10c1a175f8?region=us-east-1&jit-enabled=false
connected to route user after given sudo su
in this session we can see
which ssm is doing the activities
how many minutes it will session
for this session which encryption key
what is the session duration
re initlise the sesion
if we not press any key we have idle time ot
custom euser
cloud watch log
inux profile
windo profile
==
without login to instance
how can we rn command
https://us-east-1.console.aws.amazon.com/systems-manager/run-command?region=us-east-1
at run command
i wanan configure cloudwatch or docker
downgrade is allowd
target selection
sssm agent which instance integrate
current agent version
target selection
if u selecte resource gorup
we can give the tag at his or we can create tags under resource ,w e can select under esource grouo
which isntances tehre relatd to this tag
this commands automatically installed in particular
output control
enable in cloud watch
#!/bin/bash
yam install httpd-y
service httpd start
chkconfig httpd on
ech "<h1> this is ssm</h1>" >> /var/www/html/index.html
we can give s3sbucket
get system logs
