search

aws / amazon-ssm-agent

An agent to enable remote management of your EC2 instances, on-premises servers, or virtual machines (VMs).
https://aws.amazon.com/systems-manager/
Apache License 2.0
1.06k stars 324 forks source link

Issue Configuring EC2 Instance to use Session Manager #577

Open hayydeeeeen opened 4 months ago

hayydeeeeen commented 4 months ago

I am having issues getting my first EC2 instance to work with session manager.

I have configured Systems Manger to automatically convert new EC2 Instances to managed nodes, per this documentation but it isn't working. I've come over from issue #544, but even after following the suggested steps there, no luck. See attached for a screenshot of the ssm log obtained via ssh connection into the instance (that's as far as it got). I've attached AmazonSSMServiceRolePolicy to the IAM role associated with my instance, and unsured that the role does not allow the UpdateInstanceInformation permission (applicable instructions found here).

What else do I need to do to be able to connect with Session Manager?

My instance is a t2.micro running Amazon Linux 2023 AMI.

P.S. If it's relevant, Instance Connect Isn't working either, only SSH.

image

yuting-fan commented 3 months ago

Hi @hayydeeeeen ,

I'm trying to confirm some details in the setup here -

  1. Your instance profile role uses AmazonSSMServiceRolePolicy, which does not have UpdateInstanceInformation permission?
  2. You have enabled Default Host Management Configuration following https://docs.aws.amazon.com/systems-manager/latest/userguide/managed-instances-default-host-management.html, which includes setting up Service Setting that sets a default role?
  3. Then after you launch / reboot the instance, you saw the above logs in SSM agent logs.
  4. Did you check whether this instance is now connected to SSM under Fleet Manager console?

Once you've shared the above info I'd be happy to help next, because based on the info so far I don't think the issue is with Session Manager usage, but whether the instance is connected to SSM / whether Default Host Management Configuration is correctly set up.

Regards, Yuting