Expand description
AWS Systems Manager is a collection of capabilities that helps you automate management tasks such as collecting system inventory, applying operating system (OS) patches, automating the creation of Amazon Machine Images (AMIs), and configuring operating systems (OSs) and applications at scale. Systems Manager lets you remotely and securely manage the configuration of your managed instances. A managed instance is any Amazon Elastic Compute Cloud instance (EC2 instance), or any on-premises server or virtual machine (VM) in your hybrid environment that has been configured for Systems Manager.
This reference is intended to be used with the AWS Systems Manager User Guide.
To get started, verify prerequisites and configure managed instances. For more information, see Setting up AWS Systems Manager in the AWS Systems Manager User Guide.
Related resources
-
For information about how to use a Query API, see Making API requests.
-
For information about other API actions you can perform on EC2 instances, see the Amazon EC2 API Reference.
-
For information about AWS AppConfig, a capability of Systems Manager, see the AWS AppConfig User Guide and the AWS AppConfig API Reference.
-
For information about AWS Incident Manager, a capability of Systems Manager, see the AWS Incident Manager User Guide and the AWS Incident Manager API Reference.
If you’re using the service, you’re probably looking for SsmClient and Ssm.
Structs§
- Account
Sharing Info Information includes the AWS account ID where the current document is shared and the version shared with that account.
- Activation
An activation registers one or more on-premises servers or virtual machines (VMs) with AWS so that you can configure those servers or VMs using Run Command. A server or VM that has been registered with AWS is called a managed instance.
- AddTags
ToResource Request - AddTags
ToResource Result - Associate
OpsItem Related Item Request - Associate
OpsItem Related Item Response - Association
Describes an association of a Systems Manager document and an instance.
- Association
Description Describes the parameters for a document.
- Association
Execution Includes information about the specified association.
- Association
Execution Filter Filters used in the request.
- Association
Execution Target Includes information about the specified association execution.
- Association
Execution Targets Filter Filters for the association execution.
- Association
Filter Describes a filter.
- Association
Overview Information about the association.
- Association
Status Describes an association status.
- Association
Version Info Information about the association version.
- Attachment
Content A structure that includes attributes that describe a document attachment.
- Attachment
Information An attribute of an attachment, such as the attachment name.
- Attachments
Source Identifying information about a document attachment, including the file name and a key-value pair that identifies the location of an attachment to a document.
- Automation
Execution Detailed information about the current state of an individual Automation execution.
- Automation
Execution Filter A filter used to match specific automation executions. This is used to limit the scope of Automation execution information returned.
- Automation
Execution Metadata Details about a specific Automation execution.
- Baseline
Override Defines the basic information about a patch baseline override.
- Cancel
Command Request - Cancel
Command Result Whether or not the command was successfully canceled. There is no guarantee that a request can be canceled.
- Cancel
Maintenance Window Execution Request - Cancel
Maintenance Window Execution Result - Cloud
Watch Output Config Configuration options for sending command output to CloudWatch Logs.
- Command
Describes a command request.
- Command
Filter Describes a command filter.
An instance ID can't be specified when a command status is
Pendingbecause the command hasn't run on the instance yet.- Command
Invocation An invocation is copy of a command sent to a specific instance. A command can apply to one or more instances. A command invocation applies to one instance. For example, if a user runs SendCommand against three instances, then a command invocation is created for each requested instance ID. A command invocation returns status and detail information about a command you ran.
- Command
Plugin Describes plugin details.
- Compliance
Execution Summary A summary of the call execution that includes an execution ID, the type of execution (for example,
Command), and the date/time of the execution using a datetime object that is saved in the following format: yyyy-MM-dd'T'HH:mm:ss'Z'.- Compliance
Item Information about the compliance as defined by the resource type. For example, for a patch resource type,
Itemsincludes information about the PatchSeverity, Classification, and so on.- Compliance
Item Entry Information about a compliance item.
- Compliance
String Filter One or more filters. Use a filter to return a more specific list of results.
- Compliance
Summary Item A summary of compliance information by compliance type.
- Compliant
Summary A summary of resources that are compliant. The summary is organized according to the resource count for each compliance type.
- Create
Activation Request - Create
Activation Result - Create
Association Batch Request - Create
Association Batch Request Entry Describes the association of a Systems Manager SSM document and an instance.
- Create
Association Batch Result - Create
Association Request - Create
Association Result - Create
Document Request - Create
Document Result - Create
Maintenance Window Request - Create
Maintenance Window Result - Create
OpsItem Request - Create
OpsItem Response - Create
OpsMetadata Request - Create
OpsMetadata Result - Create
Patch Baseline Request - Create
Patch Baseline Result - Create
Resource Data Sync Request - Create
Resource Data Sync Result - Delete
Activation Request - Delete
Activation Result - Delete
Association Request - Delete
Association Result - Delete
Document Request - Delete
Document Result - Delete
Inventory Request - Delete
Inventory Result - Delete
Maintenance Window Request - Delete
Maintenance Window Result - Delete
OpsMetadata Request - Delete
OpsMetadata Result - Delete
Parameter Request - Delete
Parameter Result - Delete
Parameters Request - Delete
Parameters Result - Delete
Patch Baseline Request - Delete
Patch Baseline Result - Delete
Resource Data Sync Request - Delete
Resource Data Sync Result - Deregister
Managed Instance Request - Deregister
Managed Instance Result - Deregister
Patch Baseline ForPatch Group Request - Deregister
Patch Baseline ForPatch Group Result - Deregister
Target From Maintenance Window Request - Deregister
Target From Maintenance Window Result - Deregister
Task From Maintenance Window Request - Deregister
Task From Maintenance Window Result - Describe
Activations Filter Filter for the DescribeActivation API.
- Describe
Activations Request - Describe
Activations Result - Describe
Association Execution Targets Request - Describe
Association Execution Targets Result - Describe
Association Executions Request - Describe
Association Executions Result - Describe
Association Request - Describe
Association Result - Describe
Automation Executions Request - Describe
Automation Executions Result - Describe
Automation Step Executions Request - Describe
Automation Step Executions Result - Describe
Available Patches Request - Describe
Available Patches Result - Describe
Document Permission Request - Describe
Document Permission Response - Describe
Document Request - Describe
Document Result - Describe
Effective Instance Associations Request - Describe
Effective Instance Associations Result - Describe
Effective Patches ForPatch Baseline Request - Describe
Effective Patches ForPatch Baseline Result - Describe
Instance Associations Status Request - Describe
Instance Associations Status Result - Describe
Instance Information Request - Describe
Instance Information Result - Describe
Instance Patch States ForPatch Group Request - Describe
Instance Patch States ForPatch Group Result - Describe
Instance Patch States Request - Describe
Instance Patch States Result - Describe
Instance Patches Request - Describe
Instance Patches Result - Describe
Inventory Deletions Request - Describe
Inventory Deletions Result - Describe
Maintenance Window Execution Task Invocations Request - Describe
Maintenance Window Execution Task Invocations Result - Describe
Maintenance Window Execution Tasks Request - Describe
Maintenance Window Execution Tasks Result - Describe
Maintenance Window Executions Request - Describe
Maintenance Window Executions Result - Describe
Maintenance Window Schedule Request - Describe
Maintenance Window Schedule Result - Describe
Maintenance Window Targets Request - Describe
Maintenance Window Targets Result - Describe
Maintenance Window Tasks Request - Describe
Maintenance Window Tasks Result - Describe
Maintenance Windows ForTarget Request - Describe
Maintenance Windows ForTarget Result - Describe
Maintenance Windows Request - Describe
Maintenance Windows Result - Describe
OpsItems Request - Describe
OpsItems Response - Describe
Parameters Request - Describe
Parameters Result - Describe
Patch Baselines Request - Describe
Patch Baselines Result - Describe
Patch Group State Request - Describe
Patch Group State Result - Describe
Patch Groups Request - Describe
Patch Groups Result - Describe
Patch Properties Request - Describe
Patch Properties Result - Describe
Sessions Request - Describe
Sessions Response - Disassociate
OpsItem Related Item Request - Disassociate
OpsItem Related Item Response - Document
Default Version Description A default version of a document.
- Document
Description Describes a Systems Manager document.
- Document
Filter This data type is deprecated. Instead, use DocumentKeyValuesFilter.
- Document
Identifier Describes the name of a Systems Manager document.
- Document
KeyValues Filter One or more filters. Use a filter to return a more specific list of documents.
For keys, you can specify one or more tags that have been applied to a document.
You can also use AWS-provided keys, some of which have specific allowed values. These keys and their associated values are as follows:
- DocumentType
-
-
ApplicationConfiguration
-
ApplicationConfigurationSchema
-
Automation
-
ChangeCalendar
-
Command
-
DeploymentStrategy
-
Package
-
Policy
-
Session
-
- Owner
-
Note that only one
Ownercan be specified in a request. For example:Key=Owner,Values=Self.-
Amazon
-
Private
-
Public
-
Self
-
ThirdParty
-
- PlatformTypes
-
-
Linux
-
Windows
-
Nameis another AWS-provided key. If you useNameas a key, you can use a name prefix to return a list of documents. For example, in the AWS CLI, to return a list of all documents that begin withTe, run the following command:aws ssm list-documents --filters Key=Name,Values=TeYou can also use the
TargetTypeAWS-provided key. For a list of valid resource type values that can be used with this key, see AWS resource and property types reference in the AWS CloudFormation User Guide.If you specify more than two keys, only documents that are identified by all the tags are returned in the results. If you specify more than two values for a key, documents that are identified by any of the values are returned in the results.
To specify a custom key and value pair, use the format
Key=tag:tagName,Values=valueName.For example, if you created a key called region and are using the AWS CLI to call the
list-documentscommand:aws ssm list-documents --filters Key=tag:region,Values=east,west Key=Owner,Values=Self- Document
Metadata Response Info Details about the response to a document review request.
- Document
Parameter Parameters specified in a System Manager document that run on the server when the command is run.
- Document
Requires An SSM document required by the current document.
- Document
Review Comment Source Information about comments added to a document review request.
- Document
Reviewer Response Source Information about a reviewer's response to a document review request.
- Document
Reviews Information about a document approval review.
- Document
Version Info Version information about the document.
- Effective
Patch The EffectivePatch structure defines metadata about a patch along with the approval state of the patch in a particular patch baseline. The approval state includes information about whether the patch is currently approved, due to be approved by a rule, explicitly approved, or explicitly rejected and the date the patch was or will be approved.
- Failed
Create Association Describes a failed association.
- Failure
Details Information about an Automation failure.
- GetAutomation
Execution Request - GetAutomation
Execution Result - GetCalendar
State Request - GetCalendar
State Response - GetCommand
Invocation Request - GetCommand
Invocation Result - GetConnection
Status Request - GetConnection
Status Response - GetDefault
Patch Baseline Request - GetDefault
Patch Baseline Result - GetDeployable
Patch Snapshot ForInstance Request - GetDeployable
Patch Snapshot ForInstance Result - GetDocument
Request - GetDocument
Result - GetInventory
Request - GetInventory
Result - GetInventory
Schema Request - GetInventory
Schema Result - GetMaintenance
Window Execution Request - GetMaintenance
Window Execution Result - GetMaintenance
Window Execution Task Invocation Request - GetMaintenance
Window Execution Task Invocation Result - GetMaintenance
Window Execution Task Request - GetMaintenance
Window Execution Task Result - GetMaintenance
Window Request - GetMaintenance
Window Result - GetMaintenance
Window Task Request - GetMaintenance
Window Task Result - GetOps
Item Request - GetOps
Item Response - GetOps
Metadata Request - GetOps
Metadata Result - GetOps
Summary Request - GetOps
Summary Result - GetParameter
History Request - GetParameter
History Result - GetParameter
Request - GetParameter
Result - GetParameters
ByPath Request - GetParameters
ByPath Result - GetParameters
Request - GetParameters
Result - GetPatch
Baseline ForPatch Group Request - GetPatch
Baseline ForPatch Group Result - GetPatch
Baseline Request - GetPatch
Baseline Result - GetService
Setting Request The request body of the GetServiceSetting API action.
- GetService
Setting Result The query result body of the GetServiceSetting API action.
- Instance
Aggregated Association Overview Status information about the aggregated associations.
- Instance
Association One or more association documents on the instance.
- Instance
Association Output Location An S3 bucket where you want to store the results of this request.
For the minimal permissions required to enable Amazon S3 output for an association, see Creating associations in the Systems Manager User Guide.
- Instance
Association Output Url The URL of S3 bucket where you want to store the results of this request.
- Instance
Association Status Info Status information about the instance association.
- Instance
Information Describes a filter for a specific list of instances.
- Instance
Information Filter Describes a filter for a specific list of instances. You can filter instances information by using tags. You specify tags by using a key-value mapping.
Use this action instead of the DescribeInstanceInformationRequest$InstanceInformationFilterList method. The
InstanceInformationFilterListmethod is a legacy method and does not support tags.- Instance
Information String Filter The filters to describe or get information about your managed instances.
- Instance
Patch State Defines the high-level patch compliance state for a managed instance, providing information about the number of installed, missing, not applicable, and failed patches along with metadata about the operation when this information was gathered for the instance.
- Instance
Patch State Filter Defines a filter used in DescribeInstancePatchStatesForPatchGroup used to scope down the information returned by the API.
- Inventory
Aggregator Specifies the inventory type and attribute for the aggregation execution.
- Inventory
Deletion Status Item Status information returned by the
DeleteInventoryaction.- Inventory
Deletion Summary Information about the delete operation.
- Inventory
Deletion Summary Item Either a count, remaining count, or a version number in a delete inventory summary.
- Inventory
Filter One or more filters. Use a filter to return a more specific list of results.
- Inventory
Group A user-defined set of one or more filters on which to aggregate inventory data. Groups return a count of resources that match and don't match the specified criteria.
- Inventory
Item Information collected from managed instances based on your inventory policy document
- Inventory
Item Attribute Attributes are the entries within the inventory item content. It contains name and value.
- Inventory
Item Schema The inventory item schema definition. Users can use this to compose inventory query filters.
- Inventory
Result Entity Inventory query results.
- Inventory
Result Item The inventory result item.
- Label
Parameter Version Request - Label
Parameter Version Result - List
Association Versions Request - List
Association Versions Result - List
Associations Request - List
Associations Result - List
Command Invocations Request - List
Command Invocations Result - List
Commands Request - List
Commands Result - List
Compliance Items Request - List
Compliance Items Result - List
Compliance Summaries Request - List
Compliance Summaries Result - List
Document Metadata History Request - List
Document Metadata History Response - List
Document Versions Request - List
Document Versions Result - List
Documents Request - List
Documents Result - List
Inventory Entries Request - List
Inventory Entries Result - List
OpsItem Events Request - List
OpsItem Events Response - List
OpsItem Related Items Request - List
OpsItem Related Items Response - List
OpsMetadata Request - List
OpsMetadata Result - List
Resource Compliance Summaries Request - List
Resource Compliance Summaries Result - List
Resource Data Sync Request - List
Resource Data Sync Result - List
Tags ForResource Request - List
Tags ForResource Result - Logging
Info Information about an S3 bucket to write instance-level logs to.
LoggingInfohas been deprecated. To specify an S3 bucket to contain logs, instead use theOutputS3BucketNameandOutputS3KeyPrefixoptions in theTaskInvocationParametersstructure. For information about how Systems Manager handles these options for the supported maintenance window task types, see MaintenanceWindowTaskInvocationParameters.- Maintenance
Window Automation Parameters The parameters for an AUTOMATION task type.
- Maintenance
Window Execution Describes the information about an execution of a maintenance window.
- Maintenance
Window Execution Task Identity Information about a task execution performed as part of a maintenance window execution.
- Maintenance
Window Execution Task Invocation Identity Describes the information about a task invocation for a particular target as part of a task execution performed as part of a maintenance window execution.
- Maintenance
Window Filter Filter used in the request. Supported filter keys are Name and Enabled.
- Maintenance
Window Identity Information about the maintenance window.
- Maintenance
Window Identity ForTarget The maintenance window to which the specified target belongs.
- Maintenance
Window Lambda Parameters The parameters for a LAMBDA task type.
For information about specifying and updating task parameters, see RegisterTaskWithMaintenanceWindow and UpdateMaintenanceWindowTask.
LoggingInfohas been deprecated. To specify an S3 bucket to contain logs, instead use theOutputS3BucketNameandOutputS3KeyPrefixoptions in theTaskInvocationParametersstructure. For information about how Systems Manager handles these options for the supported maintenance window task types, see MaintenanceWindowTaskInvocationParameters.TaskParametershas been deprecated. To specify parameters to pass to a task when it runs, instead use theParametersoption in theTaskInvocationParametersstructure. For information about how Systems Manager handles these options for the supported maintenance window task types, see MaintenanceWindowTaskInvocationParameters.For Lambda tasks, Systems Manager ignores any values specified for TaskParameters and LoggingInfo.
- Maintenance
Window RunCommand Parameters The parameters for a RUN_COMMAND task type.
For information about specifying and updating task parameters, see RegisterTaskWithMaintenanceWindow and UpdateMaintenanceWindowTask.
LoggingInfohas been deprecated. To specify an S3 bucket to contain logs, instead use theOutputS3BucketNameandOutputS3KeyPrefixoptions in theTaskInvocationParametersstructure. For information about how Systems Manager handles these options for the supported maintenance window task types, see MaintenanceWindowTaskInvocationParameters.TaskParametershas been deprecated. To specify parameters to pass to a task when it runs, instead use theParametersoption in theTaskInvocationParametersstructure. For information about how Systems Manager handles these options for the supported maintenance window task types, see MaintenanceWindowTaskInvocationParameters.For Run Command tasks, Systems Manager uses specified values for
TaskParametersandLoggingInfoonly if no values are specified forTaskInvocationParameters.- Maintenance
Window Step Functions Parameters The parameters for a STEP_FUNCTIONS task.
For information about specifying and updating task parameters, see RegisterTaskWithMaintenanceWindow and UpdateMaintenanceWindowTask.
LoggingInfohas been deprecated. To specify an S3 bucket to contain logs, instead use theOutputS3BucketNameandOutputS3KeyPrefixoptions in theTaskInvocationParametersstructure. For information about how Systems Manager handles these options for the supported maintenance window task types, see MaintenanceWindowTaskInvocationParameters.TaskParametershas been deprecated. To specify parameters to pass to a task when it runs, instead use theParametersoption in theTaskInvocationParametersstructure. For information about how Systems Manager handles these options for the supported maintenance window task types, see MaintenanceWindowTaskInvocationParameters.For Step Functions tasks, Systems Manager ignores any values specified for
TaskParametersandLoggingInfo.- Maintenance
Window Target The target registered with the maintenance window.
- Maintenance
Window Task Information about a task defined for a maintenance window.
- Maintenance
Window Task Invocation Parameters The parameters for task execution.
- Maintenance
Window Task Parameter Value Expression Defines the values for a task parameter.
- Metadata
Value Metadata to assign to an Application Manager application.
- Modify
Document Permission Request - Modify
Document Permission Response - NonCompliant
Summary A summary of resources that are not compliant. The summary is organized according to resource type.
- Notification
Config Configurations for sending notifications.
- OpsAggregator
One or more aggregators for viewing counts of OpsItems using different dimensions such as
Source,CreatedTime, orSource and CreatedTime, to name a few.- OpsEntity
The result of the query.
- OpsEntity
Item The OpsItem summaries result item.
- OpsFilter
A filter for viewing OpsItem summaries.
- OpsItem
Operations engineers and IT professionals use OpsCenter to view, investigate, and remediate operational issues impacting the performance and health of their AWS resources. For more information, see AWS Systems Manager OpsCenter in the AWS Systems Manager User Guide.
- OpsItem
Data Value An object that defines the value of the key and its type in the OperationalData map.
- OpsItem
Event Filter Describes a filter for a specific list of OpsItem events. You can filter event information by using tags. You specify tags by using a key-value pair mapping.
- OpsItem
Event Summary Summary information about an OpsItem event or that associated an OpsItem with a related item.
- OpsItem
Filter Describes an OpsItem filter.
- OpsItem
Identity Information about the user or resource that created an OpsItem event.
- OpsItem
Notification A notification about the OpsItem.
- OpsItem
Related Item Summary Summary information about related-item resources for an OpsItem.
- OpsItem
Related Items Filter Describes a filter for a specific list of related-item resources.
- OpsItem
Summary A count of OpsItems.
- OpsMetadata
Operational metadata for an application in Application Manager.
- OpsMetadata
Filter A filter to limit the number of OpsMetadata objects displayed.
- OpsResult
Attribute The OpsItem data type to return.
- Output
Source Information about the source where the association execution details are stored.
- Parameter
An Systems Manager parameter in Parameter Store.
- Parameter
History Information about parameter usage.
- Parameter
Inline Policy One or more policies assigned to a parameter.
- Parameter
Metadata Metadata includes information like the ARN of the last user and the date/time the parameter was last used.
- Parameter
String Filter One or more filters. Use a filter to return a more specific list of results.
- Parameters
Filter This data type is deprecated. Instead, use ParameterStringFilter.
- Patch
Represents metadata about a patch.
- Patch
Baseline Identity Defines the basic information about a patch baseline.
- Patch
Compliance Data Information about the state of a patch on a particular instance as it relates to the patch baseline used to patch the instance.
- Patch
Filter Defines which patches should be included in a patch baseline.
A patch filter consists of a key and a set of values. The filter key is a patch property. For example, the available filter keys for WINDOWS are PATCH_SET, PRODUCT, PRODUCT_FAMILY, CLASSIFICATION, and MSRC_SEVERITY. The filter values define a matching criterion for the patch property indicated by the key. For example, if the filter key is PRODUCT and the filter values are ["Office 2013", "Office 2016"], then the filter accepts all patches where product name is either "Office 2013" or "Office 2016". The filter values can be exact values for the patch property given as a key, or a wildcard (*), which matches all values.
You can view lists of valid values for the patch properties by running the
DescribePatchPropertiescommand. For information about which patch properties can be used with each major operating system, see DescribePatchProperties.- Patch
Filter Group A set of patch filters, typically used for approval rules.
- Patch
Group Patch Baseline Mapping The mapping between a patch group and the patch baseline the patch group is registered with.
- Patch
Orchestrator Filter Defines a filter used in Patch Manager APIs.
- Patch
Rule Defines an approval rule for a patch baseline.
- Patch
Rule Group A set of rules defining the approval rules for a patch baseline.
- Patch
Source Information about the patches to use to update the instances, including target operating systems and source repository. Applies to Linux instances only.
- Patch
Status Information about the approval status of a patch.
- Progress
Counters An aggregate of step execution statuses displayed in the AWS Console for a multi-Region and multi-account Automation execution.
- PutCompliance
Items Request - PutCompliance
Items Result - PutInventory
Request - PutInventory
Result - PutParameter
Request - PutParameter
Result - Register
Default Patch Baseline Request - Register
Default Patch Baseline Result - Register
Patch Baseline ForPatch Group Request - Register
Patch Baseline ForPatch Group Result - Register
Target With Maintenance Window Request - Register
Target With Maintenance Window Result - Register
Task With Maintenance Window Request - Register
Task With Maintenance Window Result - Related
OpsItem An OpsItems that shares something in common with the current OpsItem. For example, related OpsItems can include OpsItems with similar error messages, impacted resources, or statuses for the impacted resource.
- Remove
Tags From Resource Request - Remove
Tags From Resource Result - Reset
Service Setting Request The request body of the ResetServiceSetting API action.
- Reset
Service Setting Result The result body of the ResetServiceSetting API action.
- Resolved
Targets Information about targets that resolved during the Automation execution.
- Resource
Compliance Summary Item Compliance summary information for a specific resource.
- Resource
Data Sync AwsOrganizations Source Information about the AwsOrganizationsSource resource data sync source. A sync source of this type can synchronize data from AWS Organizations or, if an AWS Organization is not present, from multiple AWS Regions.
- Resource
Data Sync Destination Data Sharing Synchronize Systems Manager Inventory data from multiple AWS accounts defined in AWS Organizations to a centralized S3 bucket. Data is synchronized to individual key prefixes in the central bucket. Each key prefix represents a different AWS account ID.
- Resource
Data Sync Item Information about a Resource Data Sync configuration, including its current status and last successful sync.
- Resource
Data Sync Organizational Unit The AWS Organizations organizational unit data source for the sync.
- Resource
Data Sync S3Destination Information about the target S3 bucket for the Resource Data Sync.
- Resource
Data Sync Source Information about the source of the data included in the resource data sync.
- Resource
Data Sync Source With State The data type name for including resource data sync state. There are four sync states:
OrganizationNotExists(Your organization doesn't exist)NoPermissions(The system can't locate the service-linked role. This role is automatically created when a user creates a resource data sync in Explorer.)InvalidOrganizationalUnit(You specified or selected an invalid unit in the resource data sync configuration.)TrustedAccessDisabled(You disabled Systems Manager access in the organization in AWS Organizations.)- Result
Attribute The inventory item result attribute.
- Resume
Session Request - Resume
Session Response - Review
Information Information about the result of a document review request.
- Runbook
Information about an Automation runbook (Automation document) used in a runbook workflow in Change Manager.
The Automation runbooks specified for the runbook workflow can't run until all required approvals for the change request have been received.
- S3Output
Location An S3 bucket where you want to store the results of this request.
- S3Output
Url A URL for the S3 bucket where you want to store the results of this request.
- Scheduled
Window Execution Information about a scheduled execution for a maintenance window.
- Send
Automation Signal Request - Send
Automation Signal Result - Send
Command Request - Send
Command Result - Service
Setting The service setting data structure.
ServiceSettingis an account-level setting for an AWS service. This setting defines how a user interacts with or uses a service or a feature of a service. For example, if an AWS service charges money to the account based on feature or service usage, then the AWS service team might create a default setting of "false". This means the user can't use this feature unless they change the setting to "true" and intentionally opt in for a paid feature.Services map a
SettingIdobject to a setting value. AWS services teams define the default value for aSettingId. You can't create a newSettingId, but you can overwrite the default value if you have thessm:UpdateServiceSettingpermission for the setting. Use the UpdateServiceSetting API action to change the default setting. Or, use the ResetServiceSetting to change the value back to the original value defined by the AWS service team.- Session
Information about a Session Manager connection to an instance.
- Session
Filter Describes a filter for Session Manager information.
- Session
Manager Output Url Reserved for future use.
- Severity
Summary The number of managed instances found for each patch severity level defined in the request filter.
- SsmClient
- A client for the Amazon SSM API.
- Start
Associations Once Request - Start
Associations Once Result - Start
Automation Execution Request - Start
Automation Execution Result - Start
Change Request Execution Request - Start
Change Request Execution Result - Start
Session Request - Start
Session Response - Step
Execution Detailed information about an the execution state of an Automation step.
- Step
Execution Filter A filter to limit the amount of step execution information returned by the call.
- Stop
Automation Execution Request - Stop
Automation Execution Result - Tag
Metadata that you assign to your AWS resources. Tags enable you to categorize your resources in different ways, for example, by purpose, owner, or environment. In Systems Manager, you can apply tags to documents, managed instances, maintenance windows, Parameter Store parameters, and patch baselines.
- Target
An array of search criteria that targets instances using a Key,Value combination that you specify.
One or more targets must be specified for maintenance window Run Command-type tasks. Depending on the task, targets are optional for other maintenance window task types (Automation, AWS Lambda, and AWS Step Functions). For more information about running tasks that do not specify targets, see Registering maintenance window tasks without targets in the AWS Systems Manager User Guide.
Supported formats include the following.
-
Key=InstanceIds,Values=instance-id-1,instance-id-2,instance-id-3 -
Key=tag:my-tag-key,Values=my-tag-value-1,my-tag-value-2 -
Key=tag-key,Values=my-tag-key-1,my-tag-key-2 -
Run Command and Maintenance window targets only:
Key=resource-groups:Name,Values=resource-group-name -
Maintenance window targets only:
Key=resource-groups:ResourceTypeFilters,Values=resource-type-1,resource-type-2 -
Automation targets only:
Key=ResourceGroup;Values=resource-group-name
For example:
-
Key=InstanceIds,Values=i-02573cafcfEXAMPLE,i-0471e04240EXAMPLE,i-07782c72faEXAMPLE -
Key=tag:CostCenter,Values=CostCenter1,CostCenter2,CostCenter3 -
Key=tag-key,Values=Name,Instance-Type,CostCenter -
Run Command and Maintenance window targets only:
Key=resource-groups:Name,Values=ProductionResourceGroupThis example demonstrates how to target all resources in the resource group ProductionResourceGroup in your maintenance window.
-
Maintenance window targets only:
Key=resource-groups:ResourceTypeFilters,Values=AWS::EC2::INSTANCE,AWS::EC2::VPCThis example demonstrates how to target only EC2 instances and VPCs in your maintenance window.
-
Automation targets only:
Key=ResourceGroup,Values=MyResourceGroup -
State Manager association targets only:
Key=InstanceIds,Values=*This example demonstrates how to target all managed instances in the AWS Region where the association was created.
For more information about how to send commands that target instances using
Key,Valueparameters, see Targeting multiple instances in the AWS Systems Manager User Guide.-
- Target
Location The combination of AWS Regions and accounts targeted by the current Automation execution.
- Terminate
Session Request - Terminate
Session Response - Unlabel
Parameter Version Request - Unlabel
Parameter Version Result - Update
Association Request - Update
Association Result - Update
Association Status Request - Update
Association Status Result - Update
Document Default Version Request - Update
Document Default Version Result - Update
Document Metadata Request - Update
Document Metadata Response - Update
Document Request - Update
Document Result - Update
Maintenance Window Request - Update
Maintenance Window Result - Update
Maintenance Window Target Request - Update
Maintenance Window Target Result - Update
Maintenance Window Task Request - Update
Maintenance Window Task Result - Update
Managed Instance Role Request - Update
Managed Instance Role Result - Update
OpsItem Request - Update
OpsItem Response - Update
OpsMetadata Request - Update
OpsMetadata Result - Update
Patch Baseline Request - Update
Patch Baseline Result - Update
Resource Data Sync Request - Update
Resource Data Sync Result - Update
Service Setting Request The request body of the UpdateServiceSetting API action.
- Update
Service Setting Result The result body of the UpdateServiceSetting API action.
Enums§
- AddTags
ToResource Error - Errors returned by AddTagsToResource
- Associate
OpsItem Related Item Error - Errors returned by AssociateOpsItemRelatedItem
- Cancel
Command Error - Errors returned by CancelCommand
- Cancel
Maintenance Window Execution Error - Errors returned by CancelMaintenanceWindowExecution
- Create
Activation Error - Errors returned by CreateActivation
- Create
Association Batch Error - Errors returned by CreateAssociationBatch
- Create
Association Error - Errors returned by CreateAssociation
- Create
Document Error - Errors returned by CreateDocument
- Create
Maintenance Window Error - Errors returned by CreateMaintenanceWindow
- Create
OpsItem Error - Errors returned by CreateOpsItem
- Create
OpsMetadata Error - Errors returned by CreateOpsMetadata
- Create
Patch Baseline Error - Errors returned by CreatePatchBaseline
- Create
Resource Data Sync Error - Errors returned by CreateResourceDataSync
- Delete
Activation Error - Errors returned by DeleteActivation
- Delete
Association Error - Errors returned by DeleteAssociation
- Delete
Document Error - Errors returned by DeleteDocument
- Delete
Inventory Error - Errors returned by DeleteInventory
- Delete
Maintenance Window Error - Errors returned by DeleteMaintenanceWindow
- Delete
OpsMetadata Error - Errors returned by DeleteOpsMetadata
- Delete
Parameter Error - Errors returned by DeleteParameter
- Delete
Parameters Error - Errors returned by DeleteParameters
- Delete
Patch Baseline Error - Errors returned by DeletePatchBaseline
- Delete
Resource Data Sync Error - Errors returned by DeleteResourceDataSync
- Deregister
Managed Instance Error - Errors returned by DeregisterManagedInstance
- Deregister
Patch Baseline ForPatch Group Error - Errors returned by DeregisterPatchBaselineForPatchGroup
- Deregister
Target From Maintenance Window Error - Errors returned by DeregisterTargetFromMaintenanceWindow
- Deregister
Task From Maintenance Window Error - Errors returned by DeregisterTaskFromMaintenanceWindow
- Describe
Activations Error - Errors returned by DescribeActivations
- Describe
Association Error - Errors returned by DescribeAssociation
- Describe
Association Execution Targets Error - Errors returned by DescribeAssociationExecutionTargets
- Describe
Association Executions Error - Errors returned by DescribeAssociationExecutions
- Describe
Automation Executions Error - Errors returned by DescribeAutomationExecutions
- Describe
Automation Step Executions Error - Errors returned by DescribeAutomationStepExecutions
- Describe
Available Patches Error - Errors returned by DescribeAvailablePatches
- Describe
Document Error - Errors returned by DescribeDocument
- Describe
Document Permission Error - Errors returned by DescribeDocumentPermission
- Describe
Effective Instance Associations Error - Errors returned by DescribeEffectiveInstanceAssociations
- Describe
Effective Patches ForPatch Baseline Error - Errors returned by DescribeEffectivePatchesForPatchBaseline
- Describe
Instance Associations Status Error - Errors returned by DescribeInstanceAssociationsStatus
- Describe
Instance Information Error - Errors returned by DescribeInstanceInformation
- Describe
Instance Patch States Error - Errors returned by DescribeInstancePatchStates
- Describe
Instance Patch States ForPatch Group Error - Errors returned by DescribeInstancePatchStatesForPatchGroup
- Describe
Instance Patches Error - Errors returned by DescribeInstancePatches
- Describe
Inventory Deletions Error - Errors returned by DescribeInventoryDeletions
- Describe
Maintenance Window Execution Task Invocations Error - Errors returned by DescribeMaintenanceWindowExecutionTaskInvocations
- Describe
Maintenance Window Execution Tasks Error - Errors returned by DescribeMaintenanceWindowExecutionTasks
- Describe
Maintenance Window Executions Error - Errors returned by DescribeMaintenanceWindowExecutions
- Describe
Maintenance Window Schedule Error - Errors returned by DescribeMaintenanceWindowSchedule
- Describe
Maintenance Window Targets Error - Errors returned by DescribeMaintenanceWindowTargets
- Describe
Maintenance Window Tasks Error - Errors returned by DescribeMaintenanceWindowTasks
- Describe
Maintenance Windows Error - Errors returned by DescribeMaintenanceWindows
- Describe
Maintenance Windows ForTarget Error - Errors returned by DescribeMaintenanceWindowsForTarget
- Describe
OpsItems Error - Errors returned by DescribeOpsItems
- Describe
Parameters Error - Errors returned by DescribeParameters
- Describe
Patch Baselines Error - Errors returned by DescribePatchBaselines
- Describe
Patch Group State Error - Errors returned by DescribePatchGroupState
- Describe
Patch Groups Error - Errors returned by DescribePatchGroups
- Describe
Patch Properties Error - Errors returned by DescribePatchProperties
- Describe
Sessions Error - Errors returned by DescribeSessions
- Disassociate
OpsItem Related Item Error - Errors returned by DisassociateOpsItemRelatedItem
- GetAutomation
Execution Error - Errors returned by GetAutomationExecution
- GetCalendar
State Error - Errors returned by GetCalendarState
- GetCommand
Invocation Error - Errors returned by GetCommandInvocation
- GetConnection
Status Error - Errors returned by GetConnectionStatus
- GetDefault
Patch Baseline Error - Errors returned by GetDefaultPatchBaseline
- GetDeployable
Patch Snapshot ForInstance Error - Errors returned by GetDeployablePatchSnapshotForInstance
- GetDocument
Error - Errors returned by GetDocument
- GetInventory
Error - Errors returned by GetInventory
- GetInventory
Schema Error - Errors returned by GetInventorySchema
- GetMaintenance
Window Error - Errors returned by GetMaintenanceWindow
- GetMaintenance
Window Execution Error - Errors returned by GetMaintenanceWindowExecution
- GetMaintenance
Window Execution Task Error - Errors returned by GetMaintenanceWindowExecutionTask
- GetMaintenance
Window Execution Task Invocation Error - Errors returned by GetMaintenanceWindowExecutionTaskInvocation
- GetMaintenance
Window Task Error - Errors returned by GetMaintenanceWindowTask
- GetOps
Item Error - Errors returned by GetOpsItem
- GetOps
Metadata Error - Errors returned by GetOpsMetadata
- GetOps
Summary Error - Errors returned by GetOpsSummary
- GetParameter
Error - Errors returned by GetParameter
- GetParameter
History Error - Errors returned by GetParameterHistory
- GetParameters
ByPath Error - Errors returned by GetParametersByPath
- GetParameters
Error - Errors returned by GetParameters
- GetPatch
Baseline Error - Errors returned by GetPatchBaseline
- GetPatch
Baseline ForPatch Group Error - Errors returned by GetPatchBaselineForPatchGroup
- GetService
Setting Error - Errors returned by GetServiceSetting
- Label
Parameter Version Error - Errors returned by LabelParameterVersion
- List
Association Versions Error - Errors returned by ListAssociationVersions
- List
Associations Error - Errors returned by ListAssociations
- List
Command Invocations Error - Errors returned by ListCommandInvocations
- List
Commands Error - Errors returned by ListCommands
- List
Compliance Items Error - Errors returned by ListComplianceItems
- List
Compliance Summaries Error - Errors returned by ListComplianceSummaries
- List
Document Metadata History Error - Errors returned by ListDocumentMetadataHistory
- List
Document Versions Error - Errors returned by ListDocumentVersions
- List
Documents Error - Errors returned by ListDocuments
- List
Inventory Entries Error - Errors returned by ListInventoryEntries
- List
OpsItem Events Error - Errors returned by ListOpsItemEvents
- List
OpsItem Related Items Error - Errors returned by ListOpsItemRelatedItems
- List
OpsMetadata Error - Errors returned by ListOpsMetadata
- List
Resource Compliance Summaries Error - Errors returned by ListResourceComplianceSummaries
- List
Resource Data Sync Error - Errors returned by ListResourceDataSync
- List
Tags ForResource Error - Errors returned by ListTagsForResource
- Modify
Document Permission Error - Errors returned by ModifyDocumentPermission
- PutCompliance
Items Error - Errors returned by PutComplianceItems
- PutInventory
Error - Errors returned by PutInventory
- PutParameter
Error - Errors returned by PutParameter
- Register
Default Patch Baseline Error - Errors returned by RegisterDefaultPatchBaseline
- Register
Patch Baseline ForPatch Group Error - Errors returned by RegisterPatchBaselineForPatchGroup
- Register
Target With Maintenance Window Error - Errors returned by RegisterTargetWithMaintenanceWindow
- Register
Task With Maintenance Window Error - Errors returned by RegisterTaskWithMaintenanceWindow
- Remove
Tags From Resource Error - Errors returned by RemoveTagsFromResource
- Reset
Service Setting Error - Errors returned by ResetServiceSetting
- Resume
Session Error - Errors returned by ResumeSession
- Send
Automation Signal Error - Errors returned by SendAutomationSignal
- Send
Command Error - Errors returned by SendCommand
- Start
Associations Once Error - Errors returned by StartAssociationsOnce
- Start
Automation Execution Error - Errors returned by StartAutomationExecution
- Start
Change Request Execution Error - Errors returned by StartChangeRequestExecution
- Start
Session Error - Errors returned by StartSession
- Stop
Automation Execution Error - Errors returned by StopAutomationExecution
- Terminate
Session Error - Errors returned by TerminateSession
- Unlabel
Parameter Version Error - Errors returned by UnlabelParameterVersion
- Update
Association Error - Errors returned by UpdateAssociation
- Update
Association Status Error - Errors returned by UpdateAssociationStatus
- Update
Document Default Version Error - Errors returned by UpdateDocumentDefaultVersion
- Update
Document Error - Errors returned by UpdateDocument
- Update
Document Metadata Error - Errors returned by UpdateDocumentMetadata
- Update
Maintenance Window Error - Errors returned by UpdateMaintenanceWindow
- Update
Maintenance Window Target Error - Errors returned by UpdateMaintenanceWindowTarget
- Update
Maintenance Window Task Error - Errors returned by UpdateMaintenanceWindowTask
- Update
Managed Instance Role Error - Errors returned by UpdateManagedInstanceRole
- Update
OpsItem Error - Errors returned by UpdateOpsItem
- Update
OpsMetadata Error - Errors returned by UpdateOpsMetadata
- Update
Patch Baseline Error - Errors returned by UpdatePatchBaseline
- Update
Resource Data Sync Error - Errors returned by UpdateResourceDataSync
- Update
Service Setting Error - Errors returned by UpdateServiceSetting
Traits§
- Ssm
- Trait representing the capabilities of the Amazon SSM API. Amazon SSM clients implement this trait.