Running commands on managed nodes (original) (raw)

This section includes information about how to send commands from the AWS Systems Manager console to managed nodes. This section also includes information about how to cancel a command.

Note that if your node is configured with the noexec mount option for the var directory, Run Command is unable to successfuly run commands.

Important

When you send a command using Run Command, don't include sensitive information formatted as plaintext, such as passwords, configuration data, or other secrets. All Systems Manager API activity in your account is logged in an S3 bucket for AWS CloudTrail logs. This means that any user with access to S3 bucket can view the plaintext values of those secrets. For this reason, we recommend creating and usingSecureString parameters to encrypt sensitive data you use in your Systems Manager operations.

For more information, see Restricting access to Parameter Store parameters using IAM policies.

Execution history retention

The history of each command is available for up to 30 days. In addition, you can store a copy of all log files in Amazon Simple Storage Service or have an audit trail of all API calls in AWS CloudTrail.

Related information

For information about sending commands using other tools, see the following topics:

• Walkthrough: Use the AWS Tools for Windows PowerShell with Run Command or the examples in the AWS Systems Manager section of the AWS Tools for PowerShell Cmdlet Reference.
• Walkthrough: Use the AWS CLI with Run Command or the examples in the SSM CLI Reference

Contents

• Running commands from the console
• Running commands using a specific document version
• Run commands at scale
• Canceling a command

Setting up Run Command

Running commands from the console

Did this page help you? - Yes

Thanks for letting us know we're doing a good job!

If you've got a moment, please tell us what we did right so we can do more of it.

Did this page help you? - No

Thanks for letting us know this page needs work. We're sorry we let you down.

If you've got a moment, please tell us how we can make the documentation better.