You are viewing documentation for version 2 of the AWS SDK for Ruby. Version 3 documentation can be found here.
Class: Aws::SSM::Client
- Inherits:
-
Seahorse::Client::Base
- Object
- Seahorse::Client::Base
- Aws::SSM::Client
- Defined in:
- (unknown)
Overview
An API client for Amazon Simple Systems Manager (SSM). To construct a client, you need to configure a :region
and :credentials
.
ssm = Aws::SSM::Client.new(
region: region_name,
credentials: credentials,
# ...
)
See #initialize for a full list of supported configuration options.
Region
You can configure a default region in the following locations:
ENV['AWS_REGION']
Aws.config[:region]
Go here for a list of supported regions.
Credentials
Default credentials are loaded automatically from the following locations:
ENV['AWS_ACCESS_KEY_ID']
andENV['AWS_SECRET_ACCESS_KEY']
Aws.config[:credentials]
- The shared credentials ini file at
~/.aws/credentials
(more information) - From an instance profile when running on EC2
You can also construct a credentials object from one of the following classes:
Alternatively, you configure credentials with :access_key_id
and
:secret_access_key
:
# load credentials from disk
creds = YAML.load(File.read('/path/to/secrets'))
Aws::SSM::Client.new(
access_key_id: creds['access_key_id'],
secret_access_key: creds['secret_access_key']
)
Always load your credentials from outside your application. Avoid configuring credentials statically and never commit them to source control.
Instance Attribute Summary
Attributes inherited from Seahorse::Client::Base
Constructor collapse
-
#initialize(options = {}) ⇒ Aws::SSM::Client
constructor
Constructs an API client.
API Operations collapse
-
#add_tags_to_resource(options = {}) ⇒ Struct
Adds or overwrites one or more tags for the specified resource.
-
#cancel_command(options = {}) ⇒ Struct
Attempts to cancel the command specified by the Command ID.
-
#cancel_maintenance_window_execution(options = {}) ⇒ Types::CancelMaintenanceWindowExecutionResult
Stops a maintenance window execution that is already in progress and cancels any tasks in the window that have not already starting running.
-
#create_activation(options = {}) ⇒ Types::CreateActivationResult
Generates an activation code and activation ID you can use to register your on-premises server or virtual machine (VM) with Systems Manager.
-
#create_association(options = {}) ⇒ Types::CreateAssociationResult
A State Manager association defines the state that you want to maintain on your instances.
-
#create_association_batch(options = {}) ⇒ Types::CreateAssociationBatchResult
Associates the specified Systems Manager document with the specified instances or targets.
When you associate a document with one or more instances using instance IDs or tags, SSM Agent running on the instance processes the document and configures the instance as specified.
If you associate a document with an instance that already has an associated document, the system returns the AssociationAlreadyExists exception.
. -
#create_document(options = {}) ⇒ Types::CreateDocumentResult
Creates a Systems Manager (SSM) document.
-
#create_maintenance_window(options = {}) ⇒ Types::CreateMaintenanceWindowResult
Creates a new maintenance window.
The value you specify for
Duration
determines the specific end time for the maintenance window based on the time it begins. -
#create_ops_item(options = {}) ⇒ Types::CreateOpsItemResponse
Creates a new OpsItem.
-
#create_patch_baseline(options = {}) ⇒ Types::CreatePatchBaselineResult
Creates a patch baseline.
For information about valid key and value pairs in
PatchFilters
for each supported operating system type, see PatchFilter. -
#create_resource_data_sync(options = {}) ⇒ Struct
A resource data sync helps you view data from multiple sources in a single location.
-
#delete_activation(options = {}) ⇒ Struct
Deletes an activation.
-
#delete_association(options = {}) ⇒ Struct
Disassociates the specified Systems Manager document from the specified instance.
When you disassociate a document from an instance, it does not change the configuration of the instance.
-
#delete_document(options = {}) ⇒ Struct
Deletes the Systems Manager document and all instance associations to the document.
Before you delete the document, we recommend that you use DeleteAssociation to disassociate all instances that are associated with the document.
. -
#delete_inventory(options = {}) ⇒ Types::DeleteInventoryResult
Delete a custom inventory type or the data associated with a custom Inventory type.
-
#delete_maintenance_window(options = {}) ⇒ Types::DeleteMaintenanceWindowResult
Deletes a maintenance window.
.
-
#delete_parameter(options = {}) ⇒ Struct
Delete a parameter from the system.
.
-
#delete_parameters(options = {}) ⇒ Types::DeleteParametersResult
Delete a list of parameters.
.
-
#delete_patch_baseline(options = {}) ⇒ Types::DeletePatchBaselineResult
Deletes a patch baseline.
.
-
#delete_resource_data_sync(options = {}) ⇒ Struct
Deletes a Resource Data Sync configuration.
-
#deregister_managed_instance(options = {}) ⇒ Struct
Removes the server or virtual machine from the list of registered servers.
-
#deregister_patch_baseline_for_patch_group(options = {}) ⇒ Types::DeregisterPatchBaselineForPatchGroupResult
Removes a patch group from a patch baseline.
.
-
#deregister_target_from_maintenance_window(options = {}) ⇒ Types::DeregisterTargetFromMaintenanceWindowResult
Removes a target from a maintenance window.
.
-
#deregister_task_from_maintenance_window(options = {}) ⇒ Types::DeregisterTaskFromMaintenanceWindowResult
Removes a task from a maintenance window.
.
-
#describe_activations(options = {}) ⇒ Types::DescribeActivationsResult
Describes details about the activation, such as the date and time the activation was created, its expiration date, the IAM role assigned to the instances in the activation, and the number of instances registered by using this activation.
.
-
#describe_association(options = {}) ⇒ Types::DescribeAssociationResult
Describes the association for the specified target or instance.
-
#describe_association_execution_targets(options = {}) ⇒ Types::DescribeAssociationExecutionTargetsResult
Use this API action to view information about a specific execution of a specific association.
.
-
#describe_association_executions(options = {}) ⇒ Types::DescribeAssociationExecutionsResult
Use this API action to view all executions for a specific association ID.
-
#describe_automation_executions(options = {}) ⇒ Types::DescribeAutomationExecutionsResult
Provides details about all active and terminated Automation executions.
.
-
#describe_automation_step_executions(options = {}) ⇒ Types::DescribeAutomationStepExecutionsResult
Information about all active and terminated step executions in an Automation workflow.
.
-
#describe_available_patches(options = {}) ⇒ Types::DescribeAvailablePatchesResult
Lists all patches eligible to be included in a patch baseline.
.
-
#describe_document(options = {}) ⇒ Types::DescribeDocumentResult
Describes the specified Systems Manager document.
.
-
#describe_document_permission(options = {}) ⇒ Types::DescribeDocumentPermissionResponse
Describes the permissions for a Systems Manager document.
-
#describe_effective_instance_associations(options = {}) ⇒ Types::DescribeEffectiveInstanceAssociationsResult
All associations for the instance(s).
.
-
#describe_effective_patches_for_patch_baseline(options = {}) ⇒ Types::DescribeEffectivePatchesForPatchBaselineResult
Retrieves the current effective patches (the patch and the approval state) for the specified patch baseline.
-
#describe_instance_associations_status(options = {}) ⇒ Types::DescribeInstanceAssociationsStatusResult
The status of the associations for the instance(s).
.
-
#describe_instance_information(options = {}) ⇒ Types::DescribeInstanceInformationResult
Describes one or more of your instances, including information about the operating system platform, the version of SSM Agent installed on the instance, instance status, and so on.
If you specify one or more instance IDs, it returns information for those instances.
-
#describe_instance_patch_states(options = {}) ⇒ Types::DescribeInstancePatchStatesResult
Retrieves the high-level patch state of one or more instances.
.
-
#describe_instance_patch_states_for_patch_group(options = {}) ⇒ Types::DescribeInstancePatchStatesForPatchGroupResult
Retrieves the high-level patch state for the instances in the specified patch group.
.
-
#describe_instance_patches(options = {}) ⇒ Types::DescribeInstancePatchesResult
Retrieves information about the patches on the specified instance and their state relative to the patch baseline being used for the instance.
.
-
#describe_inventory_deletions(options = {}) ⇒ Types::DescribeInventoryDeletionsResult
Describes a specific delete inventory operation.
.
-
#describe_maintenance_window_execution_task_invocations(options = {}) ⇒ Types::DescribeMaintenanceWindowExecutionTaskInvocationsResult
Retrieves the individual task executions (one per target) for a particular task run as part of a maintenance window execution.
.
-
#describe_maintenance_window_execution_tasks(options = {}) ⇒ Types::DescribeMaintenanceWindowExecutionTasksResult
For a given maintenance window execution, lists the tasks that were run.
.
-
#describe_maintenance_window_executions(options = {}) ⇒ Types::DescribeMaintenanceWindowExecutionsResult
Lists the executions of a maintenance window.
-
#describe_maintenance_window_schedule(options = {}) ⇒ Types::DescribeMaintenanceWindowScheduleResult
Retrieves information about upcoming executions of a maintenance window.
.
-
#describe_maintenance_window_targets(options = {}) ⇒ Types::DescribeMaintenanceWindowTargetsResult
Lists the targets registered with the maintenance window.
.
-
#describe_maintenance_window_tasks(options = {}) ⇒ Types::DescribeMaintenanceWindowTasksResult
Lists the tasks in a maintenance window.
.
-
#describe_maintenance_windows(options = {}) ⇒ Types::DescribeMaintenanceWindowsResult
Retrieves the maintenance windows in an AWS account.
.
-
#describe_maintenance_windows_for_target(options = {}) ⇒ Types::DescribeMaintenanceWindowsForTargetResult
Retrieves information about the maintenance window targets or tasks that an instance is associated with.
.
-
#describe_ops_items(options = {}) ⇒ Types::DescribeOpsItemsResponse
Query a set of OpsItems.
-
#describe_parameters(options = {}) ⇒ Types::DescribeParametersResult
Get information about a parameter.
Request results are returned on a best-effort basis.
-
#describe_patch_baselines(options = {}) ⇒ Types::DescribePatchBaselinesResult
Lists the patch baselines in your AWS account.
.
-
#describe_patch_group_state(options = {}) ⇒ Types::DescribePatchGroupStateResult
Returns high-level aggregated patch compliance state for a patch group.
.
-
#describe_patch_groups(options = {}) ⇒ Types::DescribePatchGroupsResult
Lists all patch groups that have been registered with patch baselines.
.
-
#describe_patch_properties(options = {}) ⇒ Types::DescribePatchPropertiesResult
Lists the properties of available patches organized by product, product family, classification, severity, and other properties of available patches.
-
#describe_sessions(options = {}) ⇒ Types::DescribeSessionsResponse
Retrieves a list of all active sessions (both connected and disconnected) or terminated sessions from the past 30 days.
.
-
#get_automation_execution(options = {}) ⇒ Types::GetAutomationExecutionResult
Get detailed information about a particular Automation execution.
.
-
#get_calendar_state(options = {}) ⇒ Types::GetCalendarStateResponse
Gets the state of the AWS Systems Manager Change Calendar at an optional, specified time.
-
#get_command_invocation(options = {}) ⇒ Types::GetCommandInvocationResult
Returns detailed information about command execution for an invocation or plugin.
-
#get_connection_status(options = {}) ⇒ Types::GetConnectionStatusResponse
Retrieves the Session Manager connection status for an instance to determine whether it is running and ready to receive Session Manager connections.
.
-
#get_default_patch_baseline(options = {}) ⇒ Types::GetDefaultPatchBaselineResult
Retrieves the default patch baseline.
-
#get_deployable_patch_snapshot_for_instance(options = {}) ⇒ Types::GetDeployablePatchSnapshotForInstanceResult
Retrieves the current snapshot for the patch baseline the instance uses.
-
#get_document(options = {}) ⇒ Types::GetDocumentResult
Gets the contents of the specified Systems Manager document.
.
-
#get_inventory(options = {}) ⇒ Types::GetInventoryResult
Query inventory information.
.
-
#get_inventory_schema(options = {}) ⇒ Types::GetInventorySchemaResult
Return a list of inventory type names for the account, or return a list of attribute names for a specific Inventory item type.
.
-
#get_maintenance_window(options = {}) ⇒ Types::GetMaintenanceWindowResult
Retrieves a maintenance window.
.
-
#get_maintenance_window_execution(options = {}) ⇒ Types::GetMaintenanceWindowExecutionResult
Retrieves details about a specific a maintenance window execution.
.
-
#get_maintenance_window_execution_task(options = {}) ⇒ Types::GetMaintenanceWindowExecutionTaskResult
Retrieves the details about a specific task run as part of a maintenance window execution.
.
-
#get_maintenance_window_execution_task_invocation(options = {}) ⇒ Types::GetMaintenanceWindowExecutionTaskInvocationResult
Retrieves information about a specific task running on a specific target.
.
-
#get_maintenance_window_task(options = {}) ⇒ Types::GetMaintenanceWindowTaskResult
Lists the tasks in a maintenance window.
.
-
#get_ops_item(options = {}) ⇒ Types::GetOpsItemResponse
Get information about an OpsItem by using the ID.
-
#get_ops_summary(options = {}) ⇒ Types::GetOpsSummaryResult
View a summary of OpsItems based on specified filters and aggregators.
.
-
#get_parameter(options = {}) ⇒ Types::GetParameterResult
Get information about a parameter by using the parameter name.
-
#get_parameter_history(options = {}) ⇒ Types::GetParameterHistoryResult
Retrieves the history of all changes to a parameter.
.
-
#get_parameters(options = {}) ⇒ Types::GetParametersResult
Get details of a parameter.
-
#get_parameters_by_path(options = {}) ⇒ Types::GetParametersByPathResult
Retrieve information about one or more parameters in a specific hierarchy.
-
#get_patch_baseline(options = {}) ⇒ Types::GetPatchBaselineResult
Retrieves information about a patch baseline.
.
-
#get_patch_baseline_for_patch_group(options = {}) ⇒ Types::GetPatchBaselineForPatchGroupResult
Retrieves the patch baseline that should be used for the specified patch group.
.
-
#get_service_setting(options = {}) ⇒ Types::GetServiceSettingResult
ServiceSetting
is an account-level setting for an AWS service. -
#label_parameter_version(options = {}) ⇒ Types::LabelParameterVersionResult
A parameter label is a user-defined alias to help you manage different versions of a parameter.
-
#list_association_versions(options = {}) ⇒ Types::ListAssociationVersionsResult
Retrieves all versions of an association for a specific association ID.
.
-
#list_associations(options = {}) ⇒ Types::ListAssociationsResult
Returns all State Manager associations in the current AWS account and Region.
-
#list_command_invocations(options = {}) ⇒ Types::ListCommandInvocationsResult
An invocation is copy of a command sent to a specific instance.
-
#list_commands(options = {}) ⇒ Types::ListCommandsResult
Lists the commands requested by users of the AWS account.
.
-
#list_compliance_items(options = {}) ⇒ Types::ListComplianceItemsResult
For a specified resource ID, this API action returns a list of compliance statuses for different resource types.
-
#list_compliance_summaries(options = {}) ⇒ Types::ListComplianceSummariesResult
Returns a summary count of compliant and non-compliant resources for a compliance type.
-
#list_document_versions(options = {}) ⇒ Types::ListDocumentVersionsResult
List all versions for a document.
.
-
#list_documents(options = {}) ⇒ Types::ListDocumentsResult
Returns all Systems Manager (SSM) documents in the current AWS account and Region.
-
#list_inventory_entries(options = {}) ⇒ Types::ListInventoryEntriesResult
A list of inventory items returned by the request.
.
-
#list_resource_compliance_summaries(options = {}) ⇒ Types::ListResourceComplianceSummariesResult
Returns a resource-level summary count.
-
#list_resource_data_sync(options = {}) ⇒ Types::ListResourceDataSyncResult
Lists your resource data sync configurations.
-
#list_tags_for_resource(options = {}) ⇒ Types::ListTagsForResourceResult
Returns a list of the tags assigned to the specified resource.
.
-
#modify_document_permission(options = {}) ⇒ Struct
Shares a Systems Manager document publicly or privately.
-
#put_compliance_items(options = {}) ⇒ Struct
Registers a compliance type and other compliance details on a designated resource.
-
#put_inventory(options = {}) ⇒ Types::PutInventoryResult
Bulk update custom inventory items on one more instance.
-
#put_parameter(options = {}) ⇒ Types::PutParameterResult
Add a parameter to the system.
.
-
#register_default_patch_baseline(options = {}) ⇒ Types::RegisterDefaultPatchBaselineResult
Defines the default patch baseline for the relevant operating system.
To reset the AWS predefined patch baseline as the default, specify the full patch baseline ARN as the baseline ID value.
-
#register_patch_baseline_for_patch_group(options = {}) ⇒ Types::RegisterPatchBaselineForPatchGroupResult
Registers a patch baseline for a patch group.
.
-
#register_target_with_maintenance_window(options = {}) ⇒ Types::RegisterTargetWithMaintenanceWindowResult
Registers a target with a maintenance window.
.
-
#register_task_with_maintenance_window(options = {}) ⇒ Types::RegisterTaskWithMaintenanceWindowResult
Adds a new task to a maintenance window.
.
-
#remove_tags_from_resource(options = {}) ⇒ Struct
Removes tag keys from the specified resource.
.
-
#reset_service_setting(options = {}) ⇒ Types::ResetServiceSettingResult
ServiceSetting
is an account-level setting for an AWS service. -
#resume_session(options = {}) ⇒ Types::ResumeSessionResponse
Reconnects a session to an instance after it has been disconnected.
-
#send_automation_signal(options = {}) ⇒ Struct
Sends a signal to an Automation execution to change the current behavior or status of the execution.
-
#send_command(options = {}) ⇒ Types::SendCommandResult
Runs commands on one or more managed instances.
.
-
#start_associations_once(options = {}) ⇒ Struct
Use this API action to run an association immediately and only one time.
-
#start_automation_execution(options = {}) ⇒ Types::StartAutomationExecutionResult
Initiates execution of an Automation document.
.
-
#start_session(options = {}) ⇒ Types::StartSessionResponse
Initiates a connection to a target (for example, an instance) for a Session Manager session.
-
#stop_automation_execution(options = {}) ⇒ Struct
Stop an Automation that is currently running.
.
-
#terminate_session(options = {}) ⇒ Types::TerminateSessionResponse
Permanently ends a session and closes the data connection between the Session Manager client and SSM Agent on the instance.
-
#update_association(options = {}) ⇒ Types::UpdateAssociationResult
Updates an association.
-
#update_association_status(options = {}) ⇒ Types::UpdateAssociationStatusResult
Updates the status of the Systems Manager document associated with the specified instance.
.
-
#update_document(options = {}) ⇒ Types::UpdateDocumentResult
Updates one or more values for an SSM document.
.
-
#update_document_default_version(options = {}) ⇒ Types::UpdateDocumentDefaultVersionResult
Set the default version of a document.
-
#update_maintenance_window(options = {}) ⇒ Types::UpdateMaintenanceWindowResult
Updates an existing maintenance window.
-
#update_maintenance_window_target(options = {}) ⇒ Types::UpdateMaintenanceWindowTargetResult
Modifies the target of an existing maintenance window.
-
#update_maintenance_window_task(options = {}) ⇒ Types::UpdateMaintenanceWindowTaskResult
Modifies a task assigned to a maintenance window.
-
#update_managed_instance_role(options = {}) ⇒ Struct
Changes the Amazon Identity and Access Management (IAM) role that is assigned to the on-premises instance or virtual machines (VM).
-
#update_ops_item(options = {}) ⇒ Struct
Edit or change an OpsItem.
-
#update_patch_baseline(options = {}) ⇒ Types::UpdatePatchBaselineResult
Modifies an existing patch baseline.
-
#update_resource_data_sync(options = {}) ⇒ Struct
Update a resource data sync.
-
#update_service_setting(options = {}) ⇒ Struct
ServiceSetting
is an account-level setting for an AWS service.
Instance Method Summary collapse
-
#wait_until(waiter_name, params = {}) {|waiter| ... } ⇒ Boolean
Waiters polls an API operation until a resource enters a desired state.
-
#waiter_names ⇒ Array<Symbol>
Returns the list of supported waiters.
Methods inherited from Seahorse::Client::Base
add_plugin, api, #build_request, clear_plugins, define, new, #operation, #operation_names, plugins, remove_plugin, set_api, set_plugins
Methods included from Seahorse::Client::HandlerBuilder
#handle, #handle_request, #handle_response
Constructor Details
#initialize(options = {}) ⇒ Aws::SSM::Client
Constructs an API client.
Instance Method Details
#add_tags_to_resource(options = {}) ⇒ Struct
Adds or overwrites one or more tags for the specified resource. Tags are metadata that you can assign to your documents, managed instances, maintenance windows, Parameter Store parameters, and patch baselines. Tags enable you to categorize your resources in different ways, for example, by purpose, owner, or environment. Each tag consists of a key and an optional value, both of which you define. For example, you could define a set of tags for your account's managed instances that helps you track each instance's owner and stack level. For example: Key=Owner and Value=DbAdmin, SysAdmin, or Dev. Or Key=Stack and Value=Production, Pre-Production, or Test.
Each resource can have a maximum of 50 tags.
We recommend that you devise a set of tag keys that meets your needs for each resource type. Using a consistent set of tag keys makes it easier for you to manage your resources. You can search and filter the resources based on the tags you add. Tags don't have any semantic meaning to and are interpreted strictly as a string of characters.
For more information about using tags with EC2 instances, see Tagging your Amazon EC2 resources in the Amazon EC2 User Guide.
#cancel_command(options = {}) ⇒ Struct
Attempts to cancel the command specified by the Command ID. There is no guarantee that the command will be terminated and the underlying process stopped.
#cancel_maintenance_window_execution(options = {}) ⇒ Types::CancelMaintenanceWindowExecutionResult
Stops a maintenance window execution that is already in progress and cancels any tasks in the window that have not already starting running. (Tasks already in progress will continue to completion.)
#create_activation(options = {}) ⇒ Types::CreateActivationResult
Generates an activation code and activation ID you can use to register your on-premises server or virtual machine (VM) with Systems Manager. Registering these machines with Systems Manager makes it possible to manage them using Systems Manager capabilities. You use the activation code and ID when installing SSM Agent on machines in your hybrid environment. For more information about requirements for managing on-premises instances and VMs using Systems Manager, see Setting up AWS Systems Manager for hybrid environments in the AWS Systems Manager User Guide.
On-premises servers or VMs that are registered with Systems Manager and EC2 instances that you manage with Systems Manager are all called managed instances.
#create_association(options = {}) ⇒ Types::CreateAssociationResult
A State Manager association defines the state that you want to maintain on your instances. For example, an association can specify that anti-virus software must be installed and running on your instances, or that certain ports must be closed. For static targets, the association specifies a schedule for when the configuration is reapplied. For dynamic targets, such as an AWS Resource Group or an AWS Autoscaling Group, State Manager applies the configuration when new instances are added to the group. The association also specifies actions to take when applying the configuration. For example, an association for anti-virus software might run once a day. If the software is not installed, then State Manager installs it. If the software is installed, but the service is not running, then the association might instruct State Manager to start the service.
#create_association_batch(options = {}) ⇒ Types::CreateAssociationBatchResult
Associates the specified Systems Manager document with the specified instances or targets.
When you associate a document with one or more instances using instance IDs or tags, SSM Agent running on the instance processes the document and configures the instance as specified.
If you associate a document with an instance that already has an associated document, the system returns the AssociationAlreadyExists exception.
#create_document(options = {}) ⇒ Types::CreateDocumentResult
Creates a Systems Manager (SSM) document. An SSM document defines the actions that Systems Manager performs on your managed instances. For more information about SSM documents, including information about supported schemas, features, and syntax, see AWS Systems Manager Documents in the AWS Systems Manager User Guide.
#create_maintenance_window(options = {}) ⇒ Types::CreateMaintenanceWindowResult
Creates a new maintenance window.
The value you specify for Duration
determines the specific end time for the maintenance window based on the time it begins. No maintenance window tasks are permitted to start after the resulting endtime minus the number of hours you specify for Cutoff
. For example, if the maintenance window starts at 3 PM, the duration is three hours, and the value you specify for Cutoff
is one hour, no maintenance window tasks can start after 5 PM.
#create_ops_item(options = {}) ⇒ Types::CreateOpsItemResponse
Creates a new OpsItem. You must have permission in AWS Identity and Access Management (IAM) to create a new OpsItem. For more information, see Getting started with OpsCenter in the AWS Systems Manager User Guide.
Operations engineers and IT professionals use OpsCenter to view, investigate, and remediate operational issues impacting the performance and health of their AWS resources. For more information, see AWS Systems Manager OpsCenter in the AWS Systems Manager User Guide.
#create_patch_baseline(options = {}) ⇒ Types::CreatePatchBaselineResult
Creates a patch baseline.
For information about valid key and value pairs in PatchFilters
for each supported operating system type, see PatchFilter.
#create_resource_data_sync(options = {}) ⇒ Struct
A resource data sync helps you view data from multiple sources in a single location. Systems Manager offers two types of resource data sync: SyncToDestination
and SyncFromSource
.
You can configure Systems Manager Inventory to use the SyncToDestination
type to synchronize Inventory data from multiple AWS Regions to a single S3 bucket. For more information, see Configuring Resource Data Sync for Inventory in the AWS Systems Manager User Guide.
You can configure Systems Manager Explorer to use the SyncFromSource
type to synchronize operational work items (OpsItems) and operational data (OpsData) from multiple AWS Regions to a single S3 bucket. This type can synchronize OpsItems and OpsData from multiple AWS accounts and Regions or EntireOrganization
by using AWS Organizations. For more information, see Setting up Systems Manager Explorer to display data from multiple accounts and Regions in the AWS Systems Manager User Guide.
A resource data sync is an asynchronous operation that returns immediately. After a successful initial sync is completed, the system continuously syncs data. To check the status of a sync, use the ListResourceDataSync.
By default, data is not encrypted in Amazon S3. We strongly recommend that you enable encryption in Amazon S3 to ensure secure data storage. We also recommend that you secure access to the Amazon S3 bucket by creating a restrictive bucket policy.
#delete_activation(options = {}) ⇒ Struct
Deletes an activation. You are not required to delete an activation. If you delete an activation, you can no longer use it to register additional managed instances. Deleting an activation does not de-register managed instances. You must manually de-register managed instances.
#delete_association(options = {}) ⇒ Struct
Disassociates the specified Systems Manager document from the specified instance.
When you disassociate a document from an instance, it does not change the configuration of the instance. To change the configuration state of an instance after you disassociate a document, you must create a new document with the desired configuration and associate it with the instance.
#delete_document(options = {}) ⇒ Struct
Deletes the Systems Manager document and all instance associations to the document.
Before you delete the document, we recommend that you use DeleteAssociation to disassociate all instances that are associated with the document.
#delete_inventory(options = {}) ⇒ Types::DeleteInventoryResult
Delete a custom inventory type or the data associated with a custom Inventory type. Deleting a custom inventory type is also referred to as deleting a custom inventory schema.
#delete_maintenance_window(options = {}) ⇒ Types::DeleteMaintenanceWindowResult
Deletes a maintenance window.
#delete_parameter(options = {}) ⇒ Struct
Delete a parameter from the system.
#delete_parameters(options = {}) ⇒ Types::DeleteParametersResult
Delete a list of parameters.
#delete_patch_baseline(options = {}) ⇒ Types::DeletePatchBaselineResult
Deletes a patch baseline.
#delete_resource_data_sync(options = {}) ⇒ Struct
Deletes a Resource Data Sync configuration. After the configuration is deleted, changes to data on managed instances are no longer synced to or from the target. Deleting a sync configuration does not delete data.
#deregister_managed_instance(options = {}) ⇒ Struct
Removes the server or virtual machine from the list of registered servers. You can reregister the instance again at any time. If you don't plan to use Run Command on the server, we suggest uninstalling SSM Agent first.
#deregister_patch_baseline_for_patch_group(options = {}) ⇒ Types::DeregisterPatchBaselineForPatchGroupResult
Removes a patch group from a patch baseline.
#deregister_target_from_maintenance_window(options = {}) ⇒ Types::DeregisterTargetFromMaintenanceWindowResult
Removes a target from a maintenance window.
#deregister_task_from_maintenance_window(options = {}) ⇒ Types::DeregisterTaskFromMaintenanceWindowResult
Removes a task from a maintenance window.
#describe_activations(options = {}) ⇒ Types::DescribeActivationsResult
Describes details about the activation, such as the date and time the activation was created, its expiration date, the IAM role assigned to the instances in the activation, and the number of instances registered by using this activation.
#describe_association(options = {}) ⇒ Types::DescribeAssociationResult
Describes the association for the specified target or instance. If you created the association by using the Targets
parameter, then you must retrieve the association by using the association ID. If you created the association by specifying an instance ID and a Systems Manager document, then you retrieve the association by specifying the document name and the instance ID.
#describe_association_execution_targets(options = {}) ⇒ Types::DescribeAssociationExecutionTargetsResult
Use this API action to view information about a specific execution of a specific association.
#describe_association_executions(options = {}) ⇒ Types::DescribeAssociationExecutionsResult
Use this API action to view all executions for a specific association ID.
#describe_automation_executions(options = {}) ⇒ Types::DescribeAutomationExecutionsResult
Provides details about all active and terminated Automation executions.
#describe_automation_step_executions(options = {}) ⇒ Types::DescribeAutomationStepExecutionsResult
Information about all active and terminated step executions in an Automation workflow.
#describe_available_patches(options = {}) ⇒ Types::DescribeAvailablePatchesResult
Lists all patches eligible to be included in a patch baseline.
#describe_document(options = {}) ⇒ Types::DescribeDocumentResult
Describes the specified Systems Manager document.
#describe_document_permission(options = {}) ⇒ Types::DescribeDocumentPermissionResponse
Describes the permissions for a Systems Manager document. If you created the document, you are the owner. If a document is shared, it can either be shared privately (by specifying a user's AWS account ID) or publicly (All).
#describe_effective_instance_associations(options = {}) ⇒ Types::DescribeEffectiveInstanceAssociationsResult
All associations for the instance(s).
#describe_effective_patches_for_patch_baseline(options = {}) ⇒ Types::DescribeEffectivePatchesForPatchBaselineResult
Retrieves the current effective patches (the patch and the approval state) for the specified patch baseline. Note that this API applies only to Windows patch baselines.
#describe_instance_associations_status(options = {}) ⇒ Types::DescribeInstanceAssociationsStatusResult
The status of the associations for the instance(s).
#describe_instance_information(options = {}) ⇒ Types::DescribeInstanceInformationResult
Describes one or more of your instances, including information about the operating system platform, the version of SSM Agent installed on the instance, instance status, and so on.
If you specify one or more instance IDs, it returns information for those instances. If you do not specify instance IDs, it returns information for all your instances. If you specify an instance ID that is not valid or an instance that you do not own, you receive an error.
The IamRole field for this API action is the Amazon Identity and Access Management (IAM) role assigned to on-premises instances. This call does not return the IAM role for EC2 instances.
#describe_instance_patch_states(options = {}) ⇒ Types::DescribeInstancePatchStatesResult
Retrieves the high-level patch state of one or more instances.
#describe_instance_patch_states_for_patch_group(options = {}) ⇒ Types::DescribeInstancePatchStatesForPatchGroupResult
Retrieves the high-level patch state for the instances in the specified patch group.
#describe_instance_patches(options = {}) ⇒ Types::DescribeInstancePatchesResult
Retrieves information about the patches on the specified instance and their state relative to the patch baseline being used for the instance.
#describe_inventory_deletions(options = {}) ⇒ Types::DescribeInventoryDeletionsResult
Describes a specific delete inventory operation.
#describe_maintenance_window_execution_task_invocations(options = {}) ⇒ Types::DescribeMaintenanceWindowExecutionTaskInvocationsResult
Retrieves the individual task executions (one per target) for a particular task run as part of a maintenance window execution.
#describe_maintenance_window_execution_tasks(options = {}) ⇒ Types::DescribeMaintenanceWindowExecutionTasksResult
For a given maintenance window execution, lists the tasks that were run.
#describe_maintenance_window_executions(options = {}) ⇒ Types::DescribeMaintenanceWindowExecutionsResult
Lists the executions of a maintenance window. This includes information about when the maintenance window was scheduled to be active, and information about tasks registered and run with the maintenance window.
#describe_maintenance_window_schedule(options = {}) ⇒ Types::DescribeMaintenanceWindowScheduleResult
Retrieves information about upcoming executions of a maintenance window.
#describe_maintenance_window_targets(options = {}) ⇒ Types::DescribeMaintenanceWindowTargetsResult
Lists the targets registered with the maintenance window.
#describe_maintenance_window_tasks(options = {}) ⇒ Types::DescribeMaintenanceWindowTasksResult
Lists the tasks in a maintenance window.
#describe_maintenance_windows(options = {}) ⇒ Types::DescribeMaintenanceWindowsResult
Retrieves the maintenance windows in an AWS account.
#describe_maintenance_windows_for_target(options = {}) ⇒ Types::DescribeMaintenanceWindowsForTargetResult
Retrieves information about the maintenance window targets or tasks that an instance is associated with.
#describe_ops_items(options = {}) ⇒ Types::DescribeOpsItemsResponse
Query a set of OpsItems. You must have permission in AWS Identity and Access Management (IAM) to query a list of OpsItems. For more information, see Getting started with OpsCenter in the AWS Systems Manager User Guide.
Operations engineers and IT professionals use OpsCenter to view, investigate, and remediate operational issues impacting the performance and health of their AWS resources. For more information, see AWS Systems Manager OpsCenter in the AWS Systems Manager User Guide.
#describe_parameters(options = {}) ⇒ Types::DescribeParametersResult
Get information about a parameter.
Request results are returned on a best-effort basis. If you specify MaxResults
in the request, the response includes information up to the limit specified. The number of items returned, however, can be between zero and the value of MaxResults
. If the service reaches an internal limit while processing the results, it stops the operation and returns the matching values up to that point and a NextToken
. You can specify the NextToken
in a subsequent call to get the next set of results.
#describe_patch_baselines(options = {}) ⇒ Types::DescribePatchBaselinesResult
Lists the patch baselines in your AWS account.
#describe_patch_group_state(options = {}) ⇒ Types::DescribePatchGroupStateResult
Returns high-level aggregated patch compliance state for a patch group.
#describe_patch_groups(options = {}) ⇒ Types::DescribePatchGroupsResult
Lists all patch groups that have been registered with patch baselines.
#describe_patch_properties(options = {}) ⇒ Types::DescribePatchPropertiesResult
Lists the properties of available patches organized by product, product family, classification, severity, and other properties of available patches. You can use the reported properties in the filters you specify in requests for actions such as CreatePatchBaseline, UpdatePatchBaseline, DescribeAvailablePatches, and DescribePatchBaselines.
The following section lists the properties that can be used in filters for each major operating system type:
- AMAZON_LINUX
-
Valid properties: PRODUCT, CLASSIFICATION, SEVERITY
- AMAZON_LINUX_2
-
Valid properties: PRODUCT, CLASSIFICATION, SEVERITY
- CENTOS
-
Valid properties: PRODUCT, CLASSIFICATION, SEVERITY
- DEBIAN
-
Valid properties: PRODUCT, PRIORITY
- ORACLE_LINUX
-
Valid properties: PRODUCT, CLASSIFICATION, SEVERITY
- REDHAT_ENTERPRISE_LINUX
-
Valid properties: PRODUCT, CLASSIFICATION, SEVERITY
- SUSE
-
Valid properties: PRODUCT, CLASSIFICATION, SEVERITY
- UBUNTU
-
Valid properties: PRODUCT, PRIORITY
- WINDOWS
-
Valid properties: PRODUCT, PRODUCT_FAMILY, CLASSIFICATION, MSRC_SEVERITY
#describe_sessions(options = {}) ⇒ Types::DescribeSessionsResponse
Retrieves a list of all active sessions (both connected and disconnected) or terminated sessions from the past 30 days.
#get_automation_execution(options = {}) ⇒ Types::GetAutomationExecutionResult
Get detailed information about a particular Automation execution.
#get_calendar_state(options = {}) ⇒ Types::GetCalendarStateResponse
Gets the state of the AWS Systems Manager Change Calendar at an optional, specified time. If you specify a time, GetCalendarState
returns the state of the calendar at a specific time, and returns the next time that the Change Calendar state will transition. If you do not specify a time, GetCalendarState
assumes the current time. Change Calendar entries have two possible states: OPEN
or CLOSED
.
If you specify more than one calendar in a request, the command returns the status of OPEN
only if all calendars in the request are open. If one or more calendars in the request are closed, the status returned is CLOSED
.
For more information about Systems Manager Change Calendar, see AWS Systems Manager Change Calendar in the AWS Systems Manager User Guide.
#get_command_invocation(options = {}) ⇒ Types::GetCommandInvocationResult
Returns detailed information about command execution for an invocation or plugin.
#get_connection_status(options = {}) ⇒ Types::GetConnectionStatusResponse
Retrieves the Session Manager connection status for an instance to determine whether it is running and ready to receive Session Manager connections.
#get_default_patch_baseline(options = {}) ⇒ Types::GetDefaultPatchBaselineResult
Retrieves the default patch baseline. Note that Systems Manager supports creating multiple default patch baselines. For example, you can create a default patch baseline for each operating system.
If you do not specify an operating system value, the default patch baseline for Windows is returned.
#get_deployable_patch_snapshot_for_instance(options = {}) ⇒ Types::GetDeployablePatchSnapshotForInstanceResult
Retrieves the current snapshot for the patch baseline the instance uses. This API is primarily used by the AWS-RunPatchBaseline Systems Manager document.
#get_document(options = {}) ⇒ Types::GetDocumentResult
Gets the contents of the specified Systems Manager document.
#get_inventory(options = {}) ⇒ Types::GetInventoryResult
Query inventory information.
#get_inventory_schema(options = {}) ⇒ Types::GetInventorySchemaResult
Return a list of inventory type names for the account, or return a list of attribute names for a specific Inventory item type.
#get_maintenance_window(options = {}) ⇒ Types::GetMaintenanceWindowResult
Retrieves a maintenance window.
#get_maintenance_window_execution(options = {}) ⇒ Types::GetMaintenanceWindowExecutionResult
Retrieves details about a specific a maintenance window execution.
#get_maintenance_window_execution_task(options = {}) ⇒ Types::GetMaintenanceWindowExecutionTaskResult
Retrieves the details about a specific task run as part of a maintenance window execution.
#get_maintenance_window_execution_task_invocation(options = {}) ⇒ Types::GetMaintenanceWindowExecutionTaskInvocationResult
Retrieves information about a specific task running on a specific target.
#get_maintenance_window_task(options = {}) ⇒ Types::GetMaintenanceWindowTaskResult
Lists the tasks in a maintenance window.
#get_ops_item(options = {}) ⇒ Types::GetOpsItemResponse
Get information about an OpsItem by using the ID. You must have permission in AWS Identity and Access Management (IAM) to view information about an OpsItem. For more information, see Getting started with OpsCenter in the AWS Systems Manager User Guide.
Operations engineers and IT professionals use OpsCenter to view, investigate, and remediate operational issues impacting the performance and health of their AWS resources. For more information, see AWS Systems Manager OpsCenter in the AWS Systems Manager User Guide.
#get_ops_summary(options = {}) ⇒ Types::GetOpsSummaryResult
View a summary of OpsItems based on specified filters and aggregators.
#get_parameter(options = {}) ⇒ Types::GetParameterResult
Get information about a parameter by using the parameter name. Don't confuse this API action with the GetParameters API action.
#get_parameter_history(options = {}) ⇒ Types::GetParameterHistoryResult
Retrieves the history of all changes to a parameter.
#get_parameters(options = {}) ⇒ Types::GetParametersResult
Get details of a parameter. Don't confuse this API action with the GetParameter API action.
#get_parameters_by_path(options = {}) ⇒ Types::GetParametersByPathResult
Retrieve information about one or more parameters in a specific hierarchy.
Request results are returned on a best-effort basis. If you specify MaxResults
in the request, the response includes information up to the limit specified. The number of items returned, however, can be between zero and the value of MaxResults
. If the service reaches an internal limit while processing the results, it stops the operation and returns the matching values up to that point and a NextToken
. You can specify the NextToken
in a subsequent call to get the next set of results.
#get_patch_baseline(options = {}) ⇒ Types::GetPatchBaselineResult
Retrieves information about a patch baseline.
#get_patch_baseline_for_patch_group(options = {}) ⇒ Types::GetPatchBaselineForPatchGroupResult
Retrieves the patch baseline that should be used for the specified patch group.
#get_service_setting(options = {}) ⇒ Types::GetServiceSettingResult
ServiceSetting
is an account-level setting for an AWS service. This setting defines how a user interacts with or uses a service or a feature of a service. For example, if an AWS service charges money to the account based on feature or service usage, then the AWS service team might create a default setting of "false". This means the user can't use this feature unless they change the setting to "true" and intentionally opt in for a paid feature.
Services map a SettingId
object to a setting value. AWS services teams define the default value for a SettingId
. You can't create a new SettingId
, but you can overwrite the default value if you have the ssm:UpdateServiceSetting
permission for the setting. Use the UpdateServiceSetting API action to change the default setting. Or use the ResetServiceSetting to change the value back to the original value defined by the AWS service team.
Query the current service setting for the account.
#label_parameter_version(options = {}) ⇒ Types::LabelParameterVersionResult
A parameter label is a user-defined alias to help you manage different versions of a parameter. When you modify a parameter, Systems Manager automatically saves a new version and increments the version number by one. A label can help you remember the purpose of a parameter when there are multiple versions.
Parameter labels have the following requirements and restrictions.
-
A version of a parameter can have a maximum of 10 labels.
-
You can't attach the same label to different versions of the same parameter. For example, if version 1 has the label Production, then you can't attach Production to version 2.
-
You can move a label from one version of a parameter to another.
-
You can't create a label when you create a new parameter. You must attach a label to a specific version of a parameter.
-
You can't delete a parameter label. If you no longer want to use a parameter label, then you must move it to a different version of a parameter.
-
A label can have a maximum of 100 characters.
-
Labels can contain letters (case sensitive), numbers, periods (.), hyphens (-), or underscores (_).
-
Labels can't begin with a number, "aws," or "ssm" (not case sensitive). If a label fails to meet these requirements, then the label is not associated with a parameter and the system displays it in the list of InvalidLabels.
#list_association_versions(options = {}) ⇒ Types::ListAssociationVersionsResult
Retrieves all versions of an association for a specific association ID.
#list_associations(options = {}) ⇒ Types::ListAssociationsResult
Returns all State Manager associations in the current AWS account and Region. You can limit the results to a specific State Manager association document or instance by specifying a filter.
#list_command_invocations(options = {}) ⇒ Types::ListCommandInvocationsResult
An invocation is copy of a command sent to a specific instance. A command can apply to one or more instances. A command invocation applies to one instance. For example, if a user runs SendCommand against three instances, then a command invocation is created for each requested instance ID. ListCommandInvocations provide status about command execution.
#list_commands(options = {}) ⇒ Types::ListCommandsResult
Lists the commands requested by users of the AWS account.
#list_compliance_items(options = {}) ⇒ Types::ListComplianceItemsResult
For a specified resource ID, this API action returns a list of compliance statuses for different resource types. Currently, you can only specify one resource ID per call. List results depend on the criteria specified in the filter.
#list_compliance_summaries(options = {}) ⇒ Types::ListComplianceSummariesResult
Returns a summary count of compliant and non-compliant resources for a compliance type. For example, this call can return State Manager associations, patches, or custom compliance types according to the filter criteria that you specify.
#list_document_versions(options = {}) ⇒ Types::ListDocumentVersionsResult
List all versions for a document.
#list_documents(options = {}) ⇒ Types::ListDocumentsResult
Returns all Systems Manager (SSM) documents in the current AWS account and Region. You can limit the results of this request by using a filter.
#list_inventory_entries(options = {}) ⇒ Types::ListInventoryEntriesResult
A list of inventory items returned by the request.
#list_resource_compliance_summaries(options = {}) ⇒ Types::ListResourceComplianceSummariesResult
Returns a resource-level summary count. The summary includes information about compliant and non-compliant statuses and detailed compliance-item severity counts, according to the filter criteria you specify.
#list_resource_data_sync(options = {}) ⇒ Types::ListResourceDataSyncResult
Lists your resource data sync configurations. Includes information about the last time a sync attempted to start, the last sync status, and the last time a sync successfully completed.
The number of sync configurations might be too large to return using a single call to ListResourceDataSync
. You can limit the number of sync configurations returned by using the MaxResults
parameter. To determine whether there are more sync configurations to list, check the value of NextToken
in the output. If there are more sync configurations to list, you can request them by specifying the NextToken
returned in the call to the parameter of a subsequent call.
#list_tags_for_resource(options = {}) ⇒ Types::ListTagsForResourceResult
Returns a list of the tags assigned to the specified resource.
#modify_document_permission(options = {}) ⇒ Struct
Shares a Systems Manager document publicly or privately. If you share a document privately, you must specify the AWS user account IDs for those people who can use the document. If you share a document publicly, you must specify All as the account ID.
#put_compliance_items(options = {}) ⇒ Struct
Registers a compliance type and other compliance details on a designated resource. This action lets you register custom compliance details with a resource. This call overwrites existing compliance information on the resource, so you must provide a full list of compliance items each time that you send the request.
ComplianceType can be one of the following:
-
ExecutionId: The execution ID when the patch, association, or custom compliance item was applied.
-
ExecutionType: Specify patch, association, or Custom:
string
. -
ExecutionTime. The time the patch, association, or custom compliance item was applied to the instance.
-
Id: The patch, association, or custom compliance ID.
-
Title: A title.
-
Status: The status of the compliance item. For example,
approved
for patches, orFailed
for associations. -
Severity: A patch severity. For example,
critical
. -
DocumentName: A SSM document name. For example, AWS-RunPatchBaseline.
-
DocumentVersion: An SSM document version number. For example, 4.
-
Classification: A patch classification. For example,
security updates
. -
PatchBaselineId: A patch baseline ID.
-
PatchSeverity: A patch severity. For example,
Critical
. -
PatchState: A patch state. For example,
InstancesWithFailedPatches
. -
PatchGroup: The name of a patch group.
-
InstalledTime: The time the association, patch, or custom compliance item was applied to the resource. Specify the time by using the following format: yyyy-MM-dd'T'HH:mm:ss'Z'
#put_inventory(options = {}) ⇒ Types::PutInventoryResult
Bulk update custom inventory items on one more instance. The request adds an inventory item, if it doesn't already exist, or updates an inventory item, if it does exist.
#put_parameter(options = {}) ⇒ Types::PutParameterResult
Add a parameter to the system.
#register_default_patch_baseline(options = {}) ⇒ Types::RegisterDefaultPatchBaselineResult
Defines the default patch baseline for the relevant operating system.
To reset the AWS predefined patch baseline as the default, specify the full patch baseline ARN as the baseline ID value. For example, for CentOS, specify arn:aws:ssm:us-east-2:733109147000:patchbaseline/pb-0574b43a65ea646ed
instead of pb-0574b43a65ea646ed
.
#register_patch_baseline_for_patch_group(options = {}) ⇒ Types::RegisterPatchBaselineForPatchGroupResult
Registers a patch baseline for a patch group.
#register_target_with_maintenance_window(options = {}) ⇒ Types::RegisterTargetWithMaintenanceWindowResult
Registers a target with a maintenance window.
#register_task_with_maintenance_window(options = {}) ⇒ Types::RegisterTaskWithMaintenanceWindowResult
Adds a new task to a maintenance window.
#remove_tags_from_resource(options = {}) ⇒ Struct
Removes tag keys from the specified resource.
#reset_service_setting(options = {}) ⇒ Types::ResetServiceSettingResult
ServiceSetting
is an account-level setting for an AWS service. This setting defines how a user interacts with or uses a service or a feature of a service. For example, if an AWS service charges money to the account based on feature or service usage, then the AWS service team might create a default setting of "false". This means the user can't use this feature unless they change the setting to "true" and intentionally opt in for a paid feature.
Services map a SettingId
object to a setting value. AWS services teams define the default value for a SettingId
. You can't create a new SettingId
, but you can overwrite the default value if you have the ssm:UpdateServiceSetting
permission for the setting. Use the GetServiceSetting API action to view the current value. Use the UpdateServiceSetting API action to change the default setting.
Reset the service setting for the account to the default value as provisioned by the AWS service team.
#resume_session(options = {}) ⇒ Types::ResumeSessionResponse
Reconnects a session to an instance after it has been disconnected. Connections can be resumed for disconnected sessions, but not terminated sessions.
This command is primarily for use by client machines to automatically reconnect during intermittent network issues. It is not intended for any other use.
#send_automation_signal(options = {}) ⇒ Struct
Sends a signal to an Automation execution to change the current behavior or status of the execution.
#send_command(options = {}) ⇒ Types::SendCommandResult
Runs commands on one or more managed instances.
#start_associations_once(options = {}) ⇒ Struct
Use this API action to run an association immediately and only one time. This action can be helpful when troubleshooting associations.
#start_automation_execution(options = {}) ⇒ Types::StartAutomationExecutionResult
Initiates execution of an Automation document.
#start_session(options = {}) ⇒ Types::StartSessionResponse
Initiates a connection to a target (for example, an instance) for a Session Manager session. Returns a URL and token that can be used to open a WebSocket connection for sending input and receiving outputs.
AWS CLI usage: AWS Tools for PowerShell usage: Start-SSMSession is not currently supported by AWS Tools for PowerShell on Windows local machines.start-session
is an interactive command that requires the Session Manager plugin to be installed on the client machine making the call. For information, see Install the Session Manager plugin for the AWS CLI in the AWS Systems Manager User Guide.
#stop_automation_execution(options = {}) ⇒ Struct
Stop an Automation that is currently running.
#terminate_session(options = {}) ⇒ Types::TerminateSessionResponse
Permanently ends a session and closes the data connection between the Session Manager client and SSM Agent on the instance. A terminated session cannot be resumed.
#update_association(options = {}) ⇒ Types::UpdateAssociationResult
Updates an association. You can update the association name and version, the document version, schedule, parameters, and Amazon S3 output.
In order to call this API action, your IAM user account, group, or role must be configured with permission to call the DescribeAssociation API action. If you don't have permission to call DescribeAssociation, then you receive the following error: An error occurred (AccessDeniedException) when calling the UpdateAssociation operation: User: <user_arn> is not authorized to perform: ssm:DescribeAssociation on resource: <resource_arn>
When you update an association, the association immediately runs against the specified targets.
#update_association_status(options = {}) ⇒ Types::UpdateAssociationStatusResult
Updates the status of the Systems Manager document associated with the specified instance.
#update_document(options = {}) ⇒ Types::UpdateDocumentResult
Updates one or more values for an SSM document.
#update_document_default_version(options = {}) ⇒ Types::UpdateDocumentDefaultVersionResult
Set the default version of a document.
#update_maintenance_window(options = {}) ⇒ Types::UpdateMaintenanceWindowResult
Updates an existing maintenance window. Only specified parameters are modified.
The value you specify for Duration
determines the specific end time for the maintenance window based on the time it begins. No maintenance window tasks are permitted to start after the resulting endtime minus the number of hours you specify for Cutoff
. For example, if the maintenance window starts at 3 PM, the duration is three hours, and the value you specify for Cutoff
is one hour, no maintenance window tasks can start after 5 PM.
#update_maintenance_window_target(options = {}) ⇒ Types::UpdateMaintenanceWindowTargetResult
Modifies the target of an existing maintenance window. You can change the following:
-
Name
-
Description
-
Owner
-
IDs for an ID target
-
Tags for a Tag target
-
From any supported tag type to another. The three supported tag types are ID target, Tag target, and resource group. For more information, see Target.
If a parameter is null, then the corresponding field is not modified.
#update_maintenance_window_task(options = {}) ⇒ Types::UpdateMaintenanceWindowTaskResult
Modifies a task assigned to a maintenance window. You can't change the task type, but you can change the following values:
-
TaskARN. For example, you can change a RUN_COMMAND task from AWS-RunPowerShellScript to AWS-RunShellScript.
-
ServiceRoleArn
-
TaskInvocationParameters
-
Priority
-
MaxConcurrency
-
MaxErrors
If the value for a parameter in UpdateMaintenanceWindowTask
is null, then the corresponding field is not modified. If you set Replace
to true, then all fields required by the RegisterTaskWithMaintenanceWindow action are required for this request. Optional fields that aren't specified are set to null.
When you update a maintenance window task that has options specified in TaskInvocationParameters
, you must provide again all the TaskInvocationParameters
values that you want to retain. The values you do not specify again are removed. For example, suppose that when you registered a Run Command task, you specified TaskInvocationParameters
values for Comment
, NotificationConfig
, and OutputS3BucketName
. If you update the maintenance window task and specify only a different OutputS3BucketName
value, the values for Comment
and NotificationConfig
are removed.
#update_managed_instance_role(options = {}) ⇒ Struct
Changes the Amazon Identity and Access Management (IAM) role that is assigned to the on-premises instance or virtual machines (VM). IAM roles are first assigned to these hybrid instances during the activation process. For more information, see CreateActivation.
#update_ops_item(options = {}) ⇒ Struct
Edit or change an OpsItem. You must have permission in AWS Identity and Access Management (IAM) to update an OpsItem. For more information, see Getting started with OpsCenter in the AWS Systems Manager User Guide.
Operations engineers and IT professionals use OpsCenter to view, investigate, and remediate operational issues impacting the performance and health of their AWS resources. For more information, see AWS Systems Manager OpsCenter in the AWS Systems Manager User Guide.
#update_patch_baseline(options = {}) ⇒ Types::UpdatePatchBaselineResult
Modifies an existing patch baseline. Fields not specified in the request are left unchanged.
For information about valid key and value pairs in PatchFilters
for each supported operating system type, see PatchFilter.
#update_resource_data_sync(options = {}) ⇒ Struct
Update a resource data sync. After you create a resource data sync for a Region, you can't change the account options for that sync. For example, if you create a sync in the us-east-2 (Ohio) Region and you choose the Include only the current account option, you can't edit that sync later and choose the Include all accounts from my AWS Organizations configuration option. Instead, you must delete the first resource data sync, and create a new one.
This API action only supports a resource data sync that was created with a SyncFromSource SyncType
.
#update_service_setting(options = {}) ⇒ Struct
ServiceSetting
is an account-level setting for an AWS service. This setting defines how a user interacts with or uses a service or a feature of a service. For example, if an AWS service charges money to the account based on feature or service usage, then the AWS service team might create a default setting of "false". This means the user can't use this feature unless they change the setting to "true" and intentionally opt in for a paid feature.
Services map a SettingId
object to a setting value. AWS services teams define the default value for a SettingId
. You can't create a new SettingId
, but you can overwrite the default value if you have the ssm:UpdateServiceSetting
permission for the setting. Use the GetServiceSetting API action to view the current value. Or, use the ResetServiceSetting to change the value back to the original value defined by the AWS service team.
Update the service setting for the account.
#wait_until(waiter_name, params = {}) {|waiter| ... } ⇒ Boolean
Waiters polls an API operation until a resource enters a desired state.
Basic Usage
Waiters will poll until they are succesful, they fail by entering a terminal state, or until a maximum number of attempts are made.
# polls in a loop, sleeping between attempts client.waiter_until(waiter_name, params)
Configuration
You can configure the maximum number of polling attempts, and the delay (in seconds) between each polling attempt. You configure waiters by passing a block to #wait_until:
# poll for ~25 seconds
client.wait_until(...) do |w|
w.max_attempts = 5
w.delay = 5
end
Callbacks
You can be notified before each polling attempt and before each
delay. If you throw :success
or :failure
from these callbacks,
it will terminate the waiter.
started_at = Time.now
client.wait_until(...) do |w|
# disable max attempts
w.max_attempts = nil
# poll for 1 hour, instead of a number of attempts
w.before_wait do |attempts, response|
throw :failure if Time.now - started_at > 3600
end
end
Handling Errors
When a waiter is successful, it returns true
. When a waiter
fails, it raises an error. All errors raised extend from
Waiters::Errors::WaiterFailed.
begin
client.wait_until(...)
rescue Aws::Waiters::Errors::WaiterFailed
# resource did not enter the desired state in time
end
#waiter_names ⇒ Array<Symbol>
Returns the list of supported waiters. The following table lists the supported waiters and the client method they call:
Waiter Name | Client Method | Default Delay: | Default Max Attempts: |
---|---|---|---|
:command_executed | #get_command_invocation | 5 | 20 |