aws-elixir

View Source AWS.SSM (aws-elixir v1.0.4)

Amazon Web Services Systems Manager is the operations hub for your Amazon Web Services applications and resources and a secure end-to-end management solution for hybrid cloud environments that enables safe and secure operations at scale.

This reference is intended to be used with the Amazon Web Services Systems Manager User Guide. To get started, see Setting up Amazon Web Services Systems Manager.

For information about each of the capabilities that comprise Systems Manager, see Systems Manager capabilities in the Amazon Web Services Systems Manager User Guide*.

For details about predefined runbooks for Automation, a capability of Amazon Web Services Systems Manager, see the Systems Manager Automation runbook reference *.

For information about AppConfig, a capability of Systems Manager, see the AppConfig User Guide and the AppConfig API Reference *.

For information about Incident Manager, a capability of Systems Manager, see the Systems Manager Incident Manager User Guide

Link to this section Summary

Functions

add_tags_to_resource(client, input, options \\ [])

Adds or overwrites one or more tags for the specified resource.

associate_ops_item_related_item(client, input, options \\ [])

Associates a related item to a Systems Manager OpsCenter OpsItem.

cancel_command(client, input, options \\ [])

Attempts to cancel the command specified by the Command ID.

cancel_maintenance_window_execution(client, input, options \\ [])

Stops a maintenance window execution that is already in progress and cancels any tasks in the window that haven't already starting running.

create_activation(client, input, options \\ [])

Generates an activation code and activation ID you can use to register your on-premises servers, edge devices, or virtual machine (VM) with Amazon Web Services Systems Manager.

create_association(client, input, options \\ [])

A State Manager association defines the state that you want to maintain on your managed nodes.

create_association_batch(client, input, options \\ [])

Associates the specified Amazon Web Services Systems Manager document (SSM document) with the specified managed nodes or targets.

create_document(client, input, options \\ [])

Creates a Amazon Web Services Systems Manager (SSM document).

create_maintenance_window(client, input, options \\ [])

Creates a new maintenance window.

create_ops_item(client, input, options \\ [])

Creates a new OpsItem.

create_ops_metadata(client, input, options \\ [])

If you create a new application in Application Manager, Amazon Web Services Systems Manager calls this API operation to specify information about the new application, including the application type.

create_patch_baseline(client, input, options \\ [])

Creates a patch baseline.

create_resource_data_sync(client, input, options \\ [])

A resource data sync helps you view data from multiple sources in a single location.

delete_activation(client, input, options \\ [])

Deletes an activation.

delete_association(client, input, options \\ [])

Disassociates the specified Amazon Web Services Systems Manager document (SSM document) from the specified managed node.

delete_document(client, input, options \\ [])

Deletes the Amazon Web Services Systems Manager document (SSM document) and all managed node associations to the document.

delete_inventory(client, input, options \\ [])

Delete a custom inventory type or the data associated with a custom Inventory type.

delete_maintenance_window(client, input, options \\ [])

Deletes a maintenance window.

delete_ops_item(client, input, options \\ [])

Delete an OpsItem.

delete_ops_metadata(client, input, options \\ [])

Delete OpsMetadata related to an application.

delete_parameter(client, input, options \\ [])

Delete a parameter from the system.

delete_parameters(client, input, options \\ [])

Delete a list of parameters.

delete_patch_baseline(client, input, options \\ [])

Deletes a patch baseline.

delete_resource_data_sync(client, input, options \\ [])

Deletes a resource data sync configuration.

delete_resource_policy(client, input, options \\ [])

Deletes a Systems Manager resource policy.

deregister_managed_instance(client, input, options \\ [])

Removes the server or virtual machine from the list of registered servers.

deregister_patch_baseline_for_patch_group(client, input, options \\ [])

Removes a patch group from a patch baseline.

deregister_target_from_maintenance_window(client, input, options \\ [])

Removes a target from a maintenance window.

deregister_task_from_maintenance_window(client, input, options \\ [])

Removes a task from a maintenance window.

describe_activations(client, input, options \\ [])

Describes details about the activation, such as the date and time the activation was created, its expiration date, the Identity and Access Management (IAM) role assigned to the managed nodes in the activation, and the number of nodes registered by using this activation.

describe_association(client, input, options \\ [])

Describes the association for the specified target or managed node.

describe_association_execution_targets(client, input, options \\ [])

Views information about a specific execution of a specific association.

describe_association_executions(client, input, options \\ [])

Views all executions for a specific association ID.

describe_automation_executions(client, input, options \\ [])

Provides details about all active and terminated Automation executions.

describe_automation_step_executions(client, input, options \\ [])

Information about all active and terminated step executions in an Automation workflow.

describe_available_patches(client, input, options \\ [])

Lists all patches eligible to be included in a patch baseline.

describe_document(client, input, options \\ [])

Describes the specified Amazon Web Services Systems Manager document (SSM document).

describe_document_permission(client, input, options \\ [])

Describes the permissions for a Amazon Web Services Systems Manager document (SSM document).

describe_effective_instance_associations(client, input, options \\ [])

All associations for the managed nodes.

describe_effective_patches_for_patch_baseline(client, input, options \\ [])

Retrieves the current effective patches (the patch and the approval state) for the specified patch baseline.

describe_instance_associations_status(client, input, options \\ [])

The status of the associations for the managed nodes.

describe_instance_information(client, input, options \\ [])

Provides information about one or more of your managed nodes, including the operating system platform, SSM Agent version, association status, and IP address.

describe_instance_patch_states(client, input, options \\ [])

Retrieves the high-level patch state of one or more managed nodes.

describe_instance_patch_states_for_patch_group(client, input, options \\ [])

Retrieves the high-level patch state for the managed nodes in the specified patch group.

describe_instance_patches(client, input, options \\ [])

Retrieves information about the patches on the specified managed node and their state relative to the patch baseline being used for the node.

describe_instance_properties(client, input, options \\ [])

An API operation used by the Systems Manager console to display information about Systems Manager managed nodes.

describe_inventory_deletions(client, input, options \\ [])

Describes a specific delete inventory operation.

describe_maintenance_window_execution_task_invocations(client, input, options \\ [])

Retrieves the individual task executions (one per target) for a particular task run as part of a maintenance window execution.

describe_maintenance_window_execution_tasks(client, input, options \\ [])

For a given maintenance window execution, lists the tasks that were run.

describe_maintenance_window_executions(client, input, options \\ [])

Lists the executions of a maintenance window.

describe_maintenance_window_schedule(client, input, options \\ [])

Retrieves information about upcoming executions of a maintenance window.

describe_maintenance_window_targets(client, input, options \\ [])

Lists the targets registered with the maintenance window.

describe_maintenance_window_tasks(client, input, options \\ [])

Lists the tasks in a maintenance window.

describe_maintenance_windows(client, input, options \\ [])

Retrieves the maintenance windows in an Amazon Web Services account.

describe_maintenance_windows_for_target(client, input, options \\ [])

Retrieves information about the maintenance window targets or tasks that a managed node is associated with.

describe_ops_items(client, input, options \\ [])

Query a set of OpsItems.

describe_parameters(client, input, options \\ [])

Lists the parameters in your Amazon Web Services account or the parameters shared with you when you enable the Shared option.

describe_patch_baselines(client, input, options \\ [])

Lists the patch baselines in your Amazon Web Services account.

describe_patch_group_state(client, input, options \\ [])

Returns high-level aggregated patch compliance state information for a patch group.

describe_patch_groups(client, input, options \\ [])

Lists all patch groups that have been registered with patch baselines.

describe_patch_properties(client, input, options \\ [])

Lists the properties of available patches organized by product, product family, classification, severity, and other properties of available patches.

describe_sessions(client, input, options \\ [])

Retrieves a list of all active sessions (both connected and disconnected) or terminated sessions from the past 30 days.

disassociate_ops_item_related_item(client, input, options \\ [])

Deletes the association between an OpsItem and a related item.

get_automation_execution(client, input, options \\ [])

Get detailed information about a particular Automation execution.

get_calendar_state(client, input, options \\ [])

Gets the state of a Amazon Web Services Systems Manager change calendar at the current time or a specified time.

get_command_invocation(client, input, options \\ [])

Returns detailed information about command execution for an invocation or plugin.

get_connection_status(client, input, options \\ [])

Retrieves the Session Manager connection status for a managed node to determine whether it is running and ready to receive Session Manager connections.

get_default_patch_baseline(client, input, options \\ [])

Retrieves the default patch baseline.

get_deployable_patch_snapshot_for_instance(client, input, options \\ [])

Retrieves the current snapshot for the patch baseline the managed node uses.

get_document(client, input, options \\ [])

Gets the contents of the specified Amazon Web Services Systems Manager document (SSM document).

get_execution_preview(client, input, options \\ [])

Initiates the process of retrieving an existing preview that shows the effects that running a specified Automation runbook would have on the targeted resources.

get_inventory(client, input, options \\ [])

Query inventory information.

get_inventory_schema(client, input, options \\ [])

Return a list of inventory type names for the account, or return a list of attribute names for a specific Inventory item type.

get_maintenance_window(client, input, options \\ [])

Retrieves a maintenance window.

get_maintenance_window_execution(client, input, options \\ [])

Retrieves details about a specific a maintenance window execution.

get_maintenance_window_execution_task(client, input, options \\ [])

Retrieves the details about a specific task run as part of a maintenance window execution.

get_maintenance_window_execution_task_invocation(client, input, options \\ [])

Retrieves information about a specific task running on a specific target.

get_maintenance_window_task(client, input, options \\ [])

Retrieves the details of a maintenance window task.

get_ops_item(client, input, options \\ [])

Get information about an OpsItem by using the ID.

get_ops_metadata(client, input, options \\ [])

View operational metadata related to an application in Application Manager.

get_ops_summary(client, input, options \\ [])

View a summary of operations metadata (OpsData) based on specified filters and aggregators.

get_parameter(client, input, options \\ [])

Get information about a single parameter by specifying the parameter name.

get_parameter_history(client, input, options \\ [])

Retrieves the history of all changes to a parameter.

get_parameters(client, input, options \\ [])

Get information about one or more parameters by specifying multiple parameter names.

get_parameters_by_path(client, input, options \\ [])

Retrieve information about one or more parameters in a specific hierarchy.

get_patch_baseline(client, input, options \\ [])

Retrieves information about a patch baseline.

get_patch_baseline_for_patch_group(client, input, options \\ [])

Retrieves the patch baseline that should be used for the specified patch group.

get_resource_policies(client, input, options \\ [])

Returns an array of the Policy object.

get_service_setting(client, input, options \\ [])

ServiceSetting is an account-level setting for an Amazon Web Services service.

label_parameter_version(client, input, options \\ [])

A parameter label is a user-defined alias to help you manage different versions of a parameter.

list_association_versions(client, input, options \\ [])

Retrieves all versions of an association for a specific association ID.

list_associations(client, input, options \\ [])

Returns all State Manager associations in the current Amazon Web Services account and Amazon Web Services Region.

list_command_invocations(client, input, options \\ [])

An invocation is copy of a command sent to a specific managed node.

list_commands(client, input, options \\ [])

Lists the commands requested by users of the Amazon Web Services account.

list_compliance_items(client, input, options \\ [])

For a specified resource ID, this API operation returns a list of compliance statuses for different resource types.

list_compliance_summaries(client, input, options \\ [])

Returns a summary count of compliant and non-compliant resources for a compliance type.

list_document_metadata_history(client, input, options \\ [])

Information about approval reviews for a version of a change template in Change Manager.

list_document_versions(client, input, options \\ [])

List all versions for a document.

list_documents(client, input, options \\ [])

Returns all Systems Manager (SSM) documents in the current Amazon Web Services account and Amazon Web Services Region.

list_inventory_entries(client, input, options \\ [])

A list of inventory items returned by the request.

list_nodes(client, input, options \\ [])

Takes in filters and returns a list of managed nodes matching the filter criteria.

list_nodes_summary(client, input, options \\ [])

Generates a summary of managed instance/node metadata based on the filters and aggregators you specify.

list_ops_item_events(client, input, options \\ [])

Returns a list of all OpsItem events in the current Amazon Web Services Region and Amazon Web Services account.

list_ops_item_related_items(client, input, options \\ [])

Lists all related-item resources associated with a Systems Manager OpsCenter OpsItem.

list_ops_metadata(client, input, options \\ [])

Amazon Web Services Systems Manager calls this API operation when displaying all Application Manager OpsMetadata objects or blobs.

list_resource_compliance_summaries(client, input, options \\ [])

Returns a resource-level summary count.

list_resource_data_sync(client, input, options \\ [])

Lists your resource data sync configurations.

list_tags_for_resource(client, input, options \\ [])

Returns a list of the tags assigned to the specified resource.

metadata()
modify_document_permission(client, input, options \\ [])

Shares a Amazon Web Services Systems Manager document (SSM document)publicly or privately.

put_compliance_items(client, input, options \\ [])

Registers a compliance type and other compliance details on a designated resource.

put_inventory(client, input, options \\ [])

Bulk update custom inventory items on one or more managed nodes.

put_parameter(client, input, options \\ [])

Add a parameter to the system.

put_resource_policy(client, input, options \\ [])

Creates or updates a Systems Manager resource policy.

register_default_patch_baseline(client, input, options \\ [])

Defines the default patch baseline for the relevant operating system.

register_patch_baseline_for_patch_group(client, input, options \\ [])

Registers a patch baseline for a patch group.

register_target_with_maintenance_window(client, input, options \\ [])

Registers a target with a maintenance window.

register_task_with_maintenance_window(client, input, options \\ [])

Adds a new task to a maintenance window.

remove_tags_from_resource(client, input, options \\ [])

Removes tag keys from the specified resource.

reset_service_setting(client, input, options \\ [])

ServiceSetting is an account-level setting for an Amazon Web Services service.

resume_session(client, input, options \\ [])

Reconnects a session to a managed node after it has been disconnected.

send_automation_signal(client, input, options \\ [])

Sends a signal to an Automation execution to change the current behavior or status of the execution.

send_command(client, input, options \\ [])

Runs commands on one or more managed nodes.

start_associations_once(client, input, options \\ [])

Runs an association immediately and only one time.

start_automation_execution(client, input, options \\ [])

Initiates execution of an Automation runbook.

start_change_request_execution(client, input, options \\ [])

Creates a change request for Change Manager.

start_execution_preview(client, input, options \\ [])

Initiates the process of creating a preview showing the effects that running a specified Automation runbook would have on the targeted resources.

start_session(client, input, options \\ [])

Initiates a connection to a target (for example, a managed node) for a Session Manager session.

stop_automation_execution(client, input, options \\ [])

Stop an Automation that is currently running.

terminate_session(client, input, options \\ [])

Permanently ends a session and closes the data connection between the Session Manager client and SSM Agent on the managed node.

unlabel_parameter_version(client, input, options \\ [])

Remove a label or labels from a parameter.

update_association(client, input, options \\ [])

Updates an association.

update_association_status(client, input, options \\ [])

Updates the status of the Amazon Web Services Systems Manager document (SSM document) associated with the specified managed node.

update_document(client, input, options \\ [])

Updates one or more values for an SSM document.

update_document_default_version(client, input, options \\ [])

Set the default version of a document.

update_document_metadata(client, input, options \\ [])

Updates information related to approval reviews for a specific version of a change template in Change Manager.

update_maintenance_window(client, input, options \\ [])

Updates an existing maintenance window.

update_maintenance_window_target(client, input, options \\ [])

Modifies the target of an existing maintenance window.

update_maintenance_window_task(client, input, options \\ [])

Modifies a task assigned to a maintenance window.

update_managed_instance_role(client, input, options \\ [])

Changes the Identity and Access Management (IAM) role that is assigned to the on-premises server, edge device, or virtual machines (VM).

update_ops_item(client, input, options \\ [])

Edit or change an OpsItem.

update_ops_metadata(client, input, options \\ [])

Amazon Web Services Systems Manager calls this API operation when you edit OpsMetadata in Application Manager.

update_patch_baseline(client, input, options \\ [])

Modifies an existing patch baseline.

update_resource_data_sync(client, input, options \\ [])

Update a resource data sync.

update_service_setting(client, input, options \\ [])

ServiceSetting is an account-level setting for an Amazon Web Services service.

Link to this section Functions

Link to this function

add_tags_to_resource(client, input, options \\ [])

View Source

Adds or overwrites one or more tags for the specified resource.

Tags are metadata that you can assign to your automations, documents, managed nodes, maintenance windows, Parameter Store parameters, and patch baselines. Tags enable you to categorize your resources in different ways, for example, by purpose, owner, or environment. Each tag consists of a key and an optional value, both of which you define. For example, you could define a set of tags for your account's managed nodes that helps you track each node's owner and stack level. For example:

*

Key=Owner,Value=DbAdmin

*

Key=Owner,Value=SysAdmin

*

Key=Owner,Value=Dev

*

Key=Stack,Value=Production

*

Key=Stack,Value=Pre-Production

*

Key=Stack,Value=Test

Most resources can have a maximum of 50 tags. Automations can have a maximum of 5 tags.

We recommend that you devise a set of tag keys that meets your needs for each resource type. Using a consistent set of tag keys makes it easier for you to manage your resources. You can search and filter the resources based on the tags you add. Tags don't have any semantic meaning to and are interpreted strictly as a string of characters.

For more information about using tags with Amazon Elastic Compute Cloud (Amazon EC2) instances, see Tag your Amazon EC2 resources in the Amazon EC2 User Guide.

Link to this function

cancel_command(client, input, options \\ [])

View Source

Attempts to cancel the command specified by the Command ID.

There is no guarantee that the command will be terminated and the underlying process stopped.

Link to this function

cancel_maintenance_window_execution(client, input, options \\ [])

View Source

Stops a maintenance window execution that is already in progress and cancels any tasks in the window that haven't already starting running.

Tasks already in progress will continue to completion.

Link to this function

create_activation(client, input, options \\ [])

View Source

Generates an activation code and activation ID you can use to register your on-premises servers, edge devices, or virtual machine (VM) with Amazon Web Services Systems Manager.

Registering these machines with Systems Manager makes it possible to manage them using Systems Manager capabilities. You use the activation code and ID when installing SSM Agent on machines in your hybrid environment. For more information about requirements for managing on-premises machines using Systems Manager, see Using Amazon Web Services Systems Manager in hybrid and multicloud environments in the Amazon Web Services Systems Manager User Guide.

Amazon Elastic Compute Cloud (Amazon EC2) instances, edge devices, and on-premises servers and VMs that are configured for Systems Manager are all called managed nodes.

Link to this function

create_association(client, input, options \\ [])

View Source

A State Manager association defines the state that you want to maintain on your managed nodes.

For example, an association can specify that anti-virus software must be installed and running on your managed nodes, or that certain ports must be closed. For static targets, the association specifies a schedule for when the configuration is reapplied. For dynamic targets, such as an Amazon Web Services resource group or an Amazon Web Services autoscaling group, State Manager, a capability of Amazon Web Services Systems Manager applies the configuration when new managed nodes are added to the group. The association also specifies actions to take when applying the configuration. For example, an association for anti-virus software might run once a day. If the software isn't installed, then State Manager installs it. If the software is installed, but the service isn't running, then the association might instruct State Manager to start the service.

Link to this function

create_association_batch(client, input, options \\ [])

View Source

Associates the specified Amazon Web Services Systems Manager document (SSM document) with the specified managed nodes or targets.

When you associate a document with one or more managed nodes using IDs or tags, Amazon Web Services Systems Manager Agent (SSM Agent) running on the managed node processes the document and configures the node as specified.

If you associate a document with a managed node that already has an associated document, the system returns the AssociationAlreadyExists exception.

Link to this function

create_document(client, input, options \\ [])

View Source

Creates a Amazon Web Services Systems Manager (SSM document).

An SSM document defines the actions that Systems Manager performs on your managed nodes. For more information about SSM documents, including information about supported schemas, features, and syntax, see Amazon Web Services Systems Manager Documents in the Amazon Web Services Systems Manager User Guide.

Link to this function

create_maintenance_window(client, input, options \\ [])

View Source

Creates a new maintenance window.

The value you specify for Duration determines the specific end time for the maintenance window based on the time it begins. No maintenance window tasks are permitted to start after the resulting endtime minus the number of hours you specify for Cutoff. For example, if the maintenance window starts at 3 PM, the duration is three hours, and the value you specify for Cutoff is one hour, no maintenance window tasks can start after 5 PM.

Link to this function

create_ops_item(client, input, options \\ [])

View Source

Creates a new OpsItem.

You must have permission in Identity and Access Management (IAM) to create a new OpsItem. For more information, see Set up OpsCenter in the Amazon Web Services Systems Manager User Guide.

Operations engineers and IT professionals use Amazon Web Services Systems Manager OpsCenter to view, investigate, and remediate operational issues impacting the performance and health of their Amazon Web Services resources. For more information, see Amazon Web Services Systems Manager OpsCenter in the Amazon Web Services Systems Manager User Guide.

Link to this function

create_ops_metadata(client, input, options \\ [])

View Source

If you create a new application in Application Manager, Amazon Web Services Systems Manager calls this API operation to specify information about the new application, including the application type.

Link to this function

create_patch_baseline(client, input, options \\ [])

View Source

Creates a patch baseline.

For information about valid key-value pairs in PatchFilters for each supported operating system type, see PatchFilter.

Link to this function

create_resource_data_sync(client, input, options \\ [])

View Source

A resource data sync helps you view data from multiple sources in a single location.

Amazon Web Services Systems Manager offers two types of resource data sync: SyncToDestination and SyncFromSource.

You can configure Systems Manager Inventory to use the SyncToDestination type to synchronize Inventory data from multiple Amazon Web Services Regions to a single Amazon Simple Storage Service (Amazon S3) bucket. For more information, see Creating a resource data sync for Inventory in the Amazon Web Services Systems Manager User Guide.

You can configure Systems Manager Explorer to use the SyncFromSource type to synchronize operational work items (OpsItems) and operational data (OpsData) from multiple Amazon Web Services Regions to a single Amazon S3 bucket. This type can synchronize OpsItems and OpsData from multiple Amazon Web Services accounts and Amazon Web Services Regions or EntireOrganization by using Organizations. For more information, see Setting up Systems Manager Explorer to display data from multiple accounts and Regions in the Amazon Web Services Systems Manager User Guide.

A resource data sync is an asynchronous operation that returns immediately. After a successful initial sync is completed, the system continuously syncs data. To check the status of a sync, use the ListResourceDataSync.

By default, data isn't encrypted in Amazon S3. We strongly recommend that you enable encryption in Amazon S3 to ensure secure data storage. We also recommend that you secure access to the Amazon S3 bucket by creating a restrictive bucket policy.

Link to this function

delete_activation(client, input, options \\ [])

View Source

Deletes an activation.

You aren't required to delete an activation. If you delete an activation, you can no longer use it to register additional managed nodes. Deleting an activation doesn't de-register managed nodes. You must manually de-register managed nodes.

Link to this function

delete_association(client, input, options \\ [])

View Source

Disassociates the specified Amazon Web Services Systems Manager document (SSM document) from the specified managed node.

If you created the association by using the Targets parameter, then you must delete the association by using the association ID.

When you disassociate a document from a managed node, it doesn't change the configuration of the node. To change the configuration state of a managed node after you disassociate a document, you must create a new document with the desired configuration and associate it with the node.

Link to this function

delete_document(client, input, options \\ [])

View Source

Deletes the Amazon Web Services Systems Manager document (SSM document) and all managed node associations to the document.

Before you delete the document, we recommend that you use DeleteAssociation to disassociate all managed nodes that are associated with the document.

Link to this function

delete_inventory(client, input, options \\ [])

View Source

Delete a custom inventory type or the data associated with a custom Inventory type.

Deleting a custom inventory type is also referred to as deleting a custom inventory schema.

Link to this function

delete_maintenance_window(client, input, options \\ [])

View Source

Deletes a maintenance window.

Link to this function

delete_ops_item(client, input, options \\ [])

View Source

Delete an OpsItem.

You must have permission in Identity and Access Management (IAM) to delete an OpsItem.

Note the following important information about this operation.

Deleting an OpsItem is irreversible. You can't restore a deleted OpsItem.

This operation uses an eventual consistency model, which means the system can take a few minutes to complete this operation. If you delete an OpsItem and immediately call, for example, GetOpsItem, the deleted OpsItem might still appear in the response.

This operation is idempotent. The system doesn't throw an exception if you repeatedly call this operation for the same OpsItem. If the first call is successful, all additional calls return the same successful response as the first call.

This operation doesn't support cross-account calls. A delegated administrator or management account can't delete OpsItems in other accounts, even if OpsCenter has been set up for cross-account administration. For more information about cross-account administration, see Setting up OpsCenter to centrally manage OpsItems across accounts in the Systems Manager User Guide.

Link to this function

delete_ops_metadata(client, input, options \\ [])

View Source

Delete OpsMetadata related to an application.

Link to this function

delete_parameter(client, input, options \\ [])

View Source

Delete a parameter from the system.

After deleting a parameter, wait for at least 30 seconds to create a parameter with the same name.

Link to this function

delete_parameters(client, input, options \\ [])

View Source

Delete a list of parameters.

After deleting a parameter, wait for at least 30 seconds to create a parameter with the same name.

Link to this function

delete_patch_baseline(client, input, options \\ [])

View Source

Deletes a patch baseline.

Link to this function

delete_resource_data_sync(client, input, options \\ [])

View Source

Deletes a resource data sync configuration.

After the configuration is deleted, changes to data on managed nodes are no longer synced to or from the target. Deleting a sync configuration doesn't delete data.

Link to this function

delete_resource_policy(client, input, options \\ [])

View Source

Deletes a Systems Manager resource policy.

A resource policy helps you to define the IAM entity (for example, an Amazon Web Services account) that can manage your Systems Manager resources. The following resources support Systems Manager resource policies.

*

OpsItemGroup - The resource policy for OpsItemGroup enables Amazon Web Services accounts to view and interact with OpsCenter operational work items (OpsItems).

*

Parameter - The resource policy is used to share a parameter with other accounts using Resource Access Manager (RAM). For more information about cross-account sharing of parameters, see Working with shared parameters in the Amazon Web Services Systems Manager User Guide.

Link to this function

deregister_managed_instance(client, input, options \\ [])

View Source

Removes the server or virtual machine from the list of registered servers.

You can reregister the node again at any time. If you don't plan to use Run Command on the server, we suggest uninstalling SSM Agent first.

Link to this function

deregister_patch_baseline_for_patch_group(client, input, options \\ [])

View Source

Removes a patch group from a patch baseline.

Link to this function

deregister_target_from_maintenance_window(client, input, options \\ [])

View Source

Removes a target from a maintenance window.

Link to this function

deregister_task_from_maintenance_window(client, input, options \\ [])

View Source

Removes a task from a maintenance window.

Link to this function

describe_activations(client, input, options \\ [])

View Source

Describes details about the activation, such as the date and time the activation was created, its expiration date, the Identity and Access Management (IAM) role assigned to the managed nodes in the activation, and the number of nodes registered by using this activation.

Link to this function

describe_association(client, input, options \\ [])

View Source

Describes the association for the specified target or managed node.

If you created the association by using the Targets parameter, then you must retrieve the association by using the association ID.

Link to this function

describe_association_execution_targets(client, input, options \\ [])

View Source

Views information about a specific execution of a specific association.

Link to this function

describe_association_executions(client, input, options \\ [])

View Source

Views all executions for a specific association ID.

Link to this function

describe_automation_executions(client, input, options \\ [])

View Source

Provides details about all active and terminated Automation executions.

Link to this function

describe_automation_step_executions(client, input, options \\ [])

View Source

Information about all active and terminated step executions in an Automation workflow.

Link to this function

describe_available_patches(client, input, options \\ [])

View Source

Lists all patches eligible to be included in a patch baseline.

Currently, DescribeAvailablePatches supports only the Amazon Linux 1, Amazon Linux 2, and Windows Server operating systems.

Link to this function

describe_document(client, input, options \\ [])

View Source

Describes the specified Amazon Web Services Systems Manager document (SSM document).

Link to this function

describe_document_permission(client, input, options \\ [])

View Source

Describes the permissions for a Amazon Web Services Systems Manager document (SSM document).

If you created the document, you are the owner. If a document is shared, it can either be shared privately (by specifying a user's Amazon Web Services account ID) or publicly (All).

Link to this function

describe_effective_instance_associations(client, input, options \\ [])

View Source

All associations for the managed nodes.

Link to this function

describe_effective_patches_for_patch_baseline(client, input, options \\ [])

View Source

Retrieves the current effective patches (the patch and the approval state) for the specified patch baseline.

Applies to patch baselines for Windows only.

Link to this function

describe_instance_associations_status(client, input, options \\ [])

View Source

The status of the associations for the managed nodes.

Link to this function

describe_instance_information(client, input, options \\ [])

View Source

Provides information about one or more of your managed nodes, including the operating system platform, SSM Agent version, association status, and IP address.

This operation does not return information for nodes that are either Stopped or Terminated.

If you specify one or more node IDs, the operation returns information for those managed nodes. If you don't specify node IDs, it returns information for all your managed nodes. If you specify a node ID that isn't valid or a node that you don't own, you receive an error.

The IamRole field returned for this API operation is the role assigned to an Amazon EC2 instance configured with a Systems Manager Quick Setup host management configuration or the role assigned to an on-premises managed node.

Link to this function

describe_instance_patch_states(client, input, options \\ [])

View Source

Retrieves the high-level patch state of one or more managed nodes.

Link to this function

describe_instance_patch_states_for_patch_group(client, input, options \\ [])

View Source

Retrieves the high-level patch state for the managed nodes in the specified patch group.

Link to this function

describe_instance_patches(client, input, options \\ [])

View Source

Retrieves information about the patches on the specified managed node and their state relative to the patch baseline being used for the node.

Link to this function

describe_instance_properties(client, input, options \\ [])

View Source

An API operation used by the Systems Manager console to display information about Systems Manager managed nodes.

Link to this function

describe_inventory_deletions(client, input, options \\ [])

View Source

Describes a specific delete inventory operation.

Link to this function

describe_maintenance_window_execution_task_invocations(client, input, options \\ [])

View Source

Retrieves the individual task executions (one per target) for a particular task run as part of a maintenance window execution.

Link to this function

describe_maintenance_window_execution_tasks(client, input, options \\ [])

View Source

For a given maintenance window execution, lists the tasks that were run.

Link to this function

describe_maintenance_window_executions(client, input, options \\ [])

View Source

Lists the executions of a maintenance window.

This includes information about when the maintenance window was scheduled to be active, and information about tasks registered and run with the maintenance window.

Link to this function

describe_maintenance_window_schedule(client, input, options \\ [])

View Source

Retrieves information about upcoming executions of a maintenance window.

Link to this function

describe_maintenance_window_targets(client, input, options \\ [])

View Source

Lists the targets registered with the maintenance window.

Link to this function

describe_maintenance_window_tasks(client, input, options \\ [])

View Source

Lists the tasks in a maintenance window.

For maintenance window tasks without a specified target, you can't supply values for --max-errors and --max-concurrency. Instead, the system inserts a placeholder value of 1, which may be reported in the response to this command. These values don't affect the running of your task and can be ignored.

Link to this function

describe_maintenance_windows(client, input, options \\ [])

View Source

Retrieves the maintenance windows in an Amazon Web Services account.

Link to this function

describe_maintenance_windows_for_target(client, input, options \\ [])

View Source

Retrieves information about the maintenance window targets or tasks that a managed node is associated with.

Link to this function

describe_ops_items(client, input, options \\ [])

View Source

Query a set of OpsItems.

You must have permission in Identity and Access Management (IAM) to query a list of OpsItems. For more information, see Set up OpsCenter in the Amazon Web Services Systems Manager User Guide.

Operations engineers and IT professionals use Amazon Web Services Systems Manager OpsCenter to view, investigate, and remediate operational issues impacting the performance and health of their Amazon Web Services resources. For more information, see Amazon Web Services Systems Manager OpsCenter in the Amazon Web Services Systems Manager User Guide.

Link to this function

describe_parameters(client, input, options \\ [])

View Source

Lists the parameters in your Amazon Web Services account or the parameters shared with you when you enable the Shared option.

Request results are returned on a best-effort basis. If you specify MaxResults in the request, the response includes information up to the limit specified. The number of items returned, however, can be between zero and the value of MaxResults. If the service reaches an internal limit while processing the results, it stops the operation and returns the matching values up to that point and a NextToken. You can specify the NextToken in a subsequent call to get the next set of results.

If you change the KMS key alias for the KMS key used to encrypt a parameter, then you must also update the key alias the parameter uses to reference KMS. Otherwise, DescribeParameters retrieves whatever the original key alias was referencing.

Link to this function

describe_patch_baselines(client, input, options \\ [])

View Source

Lists the patch baselines in your Amazon Web Services account.

Link to this function

describe_patch_group_state(client, input, options \\ [])

View Source

Returns high-level aggregated patch compliance state information for a patch group.

Link to this function

describe_patch_groups(client, input, options \\ [])

View Source

Lists all patch groups that have been registered with patch baselines.

Link to this function

describe_patch_properties(client, input, options \\ [])

View Source

Lists the properties of available patches organized by product, product family, classification, severity, and other properties of available patches.

You can use the reported properties in the filters you specify in requests for operations such as CreatePatchBaseline, UpdatePatchBaseline, DescribeAvailablePatches, and DescribePatchBaselines.

The following section lists the properties that can be used in filters for each major operating system type:

definitions

 Definitions

amazon_linux

 AMAZON_LINUX

Valid properties: PRODUCT | CLASSIFICATION | SEVERITY

amazon_linux_2

 AMAZON_LINUX_2

Valid properties: PRODUCT | CLASSIFICATION | SEVERITY

amazon_linux_2023

 AMAZON_LINUX_2023

Valid properties: PRODUCT | CLASSIFICATION | SEVERITY

centos

 CENTOS

Valid properties: PRODUCT | CLASSIFICATION | SEVERITY

debian

 DEBIAN

Valid properties: PRODUCT | PRIORITY

macos

 MACOS

Valid properties: PRODUCT | CLASSIFICATION

oracle_linux

 ORACLE_LINUX

Valid properties: PRODUCT | CLASSIFICATION | SEVERITY

redhat_enterprise_linux

 REDHAT_ENTERPRISE_LINUX

Valid properties: PRODUCT | CLASSIFICATION | SEVERITY

suse

 SUSE

Valid properties: PRODUCT | CLASSIFICATION | SEVERITY

ubuntu

 UBUNTU

Valid properties: PRODUCT | PRIORITY

windows

 WINDOWS

Valid properties: PRODUCT | PRODUCT_FAMILY | CLASSIFICATION | MSRC_SEVERITY

Link to this function

describe_sessions(client, input, options \\ [])

View Source

Retrieves a list of all active sessions (both connected and disconnected) or terminated sessions from the past 30 days.

Link to this function

get_automation_execution(client, input, options \\ [])

View Source

Get detailed information about a particular Automation execution.

Link to this function

get_calendar_state(client, input, options \\ [])

View Source

Gets the state of a Amazon Web Services Systems Manager change calendar at the current time or a specified time.

If you specify a time, GetCalendarState returns the state of the calendar at that specific time, and returns the next time that the change calendar state will transition. If you don't specify a time, GetCalendarState uses the current time. Change Calendar entries have two possible states: OPEN or CLOSED.

If you specify more than one calendar in a request, the command returns the status of OPEN only if all calendars in the request are open. If one or more calendars in the request are closed, the status returned is CLOSED.

For more information about Change Calendar, a capability of Amazon Web Services Systems Manager, see Amazon Web Services Systems Manager Change Calendar in the Amazon Web Services Systems Manager User Guide.

Link to this function

get_command_invocation(client, input, options \\ [])

View Source

Returns detailed information about command execution for an invocation or plugin.

The Run Command API follows an eventual consistency model, due to the distributed nature of the system supporting the API. This means that the result of an API command you run that affects your resources might not be immediately visible to all subsequent commands you run. You should keep this in mind when you carry out an API command that immediately follows a previous API command.

GetCommandInvocation only gives the execution status of a plugin in a document. To get the command execution status on a specific managed node, use ListCommandInvocations. To get the command execution status across managed nodes, use ListCommands.

Link to this function

get_connection_status(client, input, options \\ [])

View Source

Retrieves the Session Manager connection status for a managed node to determine whether it is running and ready to receive Session Manager connections.

Link to this function

get_default_patch_baseline(client, input, options \\ [])

View Source

Retrieves the default patch baseline.

Amazon Web Services Systems Manager supports creating multiple default patch baselines. For example, you can create a default patch baseline for each operating system.

If you don't specify an operating system value, the default patch baseline for Windows is returned.

Link to this function

get_deployable_patch_snapshot_for_instance(client, input, options \\ [])

View Source

Retrieves the current snapshot for the patch baseline the managed node uses.

This API is primarily used by the AWS-RunPatchBaseline Systems Manager document (SSM document).

If you run the command locally, such as with the Command Line Interface (CLI), the system attempts to use your local Amazon Web Services credentials and the operation fails. To avoid this, you can run the command in the Amazon Web Services Systems Manager console. Use Run Command, a capability of Amazon Web Services Systems Manager, with an SSM document that enables you to target a managed node with a script or command. For example, run the command using the AWS-RunShellScript document or the AWS-RunPowerShellScript document.

Link to this function

get_document(client, input, options \\ [])

View Source

Gets the contents of the specified Amazon Web Services Systems Manager document (SSM document).

Link to this function

get_execution_preview(client, input, options \\ [])

View Source

Initiates the process of retrieving an existing preview that shows the effects that running a specified Automation runbook would have on the targeted resources.

Link to this function

get_inventory(client, input, options \\ [])

View Source

Query inventory information.

This includes managed node status, such as Stopped or Terminated.

Link to this function

get_inventory_schema(client, input, options \\ [])

View Source

Return a list of inventory type names for the account, or return a list of attribute names for a specific Inventory item type.

Link to this function

get_maintenance_window(client, input, options \\ [])

View Source

Retrieves a maintenance window.

Link to this function

get_maintenance_window_execution(client, input, options \\ [])

View Source

Retrieves details about a specific a maintenance window execution.

Link to this function

get_maintenance_window_execution_task(client, input, options \\ [])

View Source

Retrieves the details about a specific task run as part of a maintenance window execution.

Link to this function

get_maintenance_window_execution_task_invocation(client, input, options \\ [])

View Source

Retrieves information about a specific task running on a specific target.

Link to this function

get_maintenance_window_task(client, input, options \\ [])

View Source

Retrieves the details of a maintenance window task.

For maintenance window tasks without a specified target, you can't supply values for --max-errors and --max-concurrency. Instead, the system inserts a placeholder value of 1, which may be reported in the response to this command. These values don't affect the running of your task and can be ignored.

To retrieve a list of tasks in a maintenance window, instead use the DescribeMaintenanceWindowTasks command.

Link to this function

get_ops_item(client, input, options \\ [])

View Source

Get information about an OpsItem by using the ID.

You must have permission in Identity and Access Management (IAM) to view information about an OpsItem. For more information, see Set up OpsCenter in the Amazon Web Services Systems Manager User Guide.

Operations engineers and IT professionals use Amazon Web Services Systems Manager OpsCenter to view, investigate, and remediate operational issues impacting the performance and health of their Amazon Web Services resources. For more information, see Amazon Web Services Systems Manager OpsCenter in the Amazon Web Services Systems Manager User Guide.

Link to this function

get_ops_metadata(client, input, options \\ [])

View Source

View operational metadata related to an application in Application Manager.

Link to this function

get_ops_summary(client, input, options \\ [])

View Source

View a summary of operations metadata (OpsData) based on specified filters and aggregators.

OpsData can include information about Amazon Web Services Systems Manager OpsCenter operational workitems (OpsItems) as well as information about any Amazon Web Services resource or service configured to report OpsData to Amazon Web Services Systems Manager Explorer.

Link to this function

get_parameter(client, input, options \\ [])

View Source

Get information about a single parameter by specifying the parameter name.

To get information about more than one parameter at a time, use the GetParameters operation.

Link to this function

get_parameter_history(client, input, options \\ [])

View Source

Retrieves the history of all changes to a parameter.

If you change the KMS key alias for the KMS key used to encrypt a parameter, then you must also update the key alias the parameter uses to reference KMS. Otherwise, GetParameterHistory retrieves whatever the original key alias was referencing.

Link to this function

get_parameters(client, input, options \\ [])

View Source

Get information about one or more parameters by specifying multiple parameter names.

To get information about a single parameter, you can use the GetParameter operation instead.

Link to this function

get_parameters_by_path(client, input, options \\ [])

View Source

Retrieve information about one or more parameters in a specific hierarchy.

Request results are returned on a best-effort basis. If you specify MaxResults in the request, the response includes information up to the limit specified. The number of items returned, however, can be between zero and the value of MaxResults. If the service reaches an internal limit while processing the results, it stops the operation and returns the matching values up to that point and a NextToken. You can specify the NextToken in a subsequent call to get the next set of results.

Link to this function

get_patch_baseline(client, input, options \\ [])

View Source

Retrieves information about a patch baseline.

Link to this function

get_patch_baseline_for_patch_group(client, input, options \\ [])

View Source

Retrieves the patch baseline that should be used for the specified patch group.

Link to this function

get_resource_policies(client, input, options \\ [])

View Source

Returns an array of the Policy object.

Link to this function

get_service_setting(client, input, options \\ [])

View Source

ServiceSetting is an account-level setting for an Amazon Web Services service.

This setting defines how a user interacts with or uses a service or a feature of a service. For example, if an Amazon Web Services service charges money to the account based on feature or service usage, then the Amazon Web Services service team might create a default setting of false. This means the user can't use this feature unless they change the setting to true and intentionally opt in for a paid feature.

Services map a SettingId object to a setting value. Amazon Web Services services teams define the default value for a SettingId. You can't create a new SettingId, but you can overwrite the default value if you have the ssm:UpdateServiceSetting permission for the setting. Use the UpdateServiceSetting API operation to change the default setting. Or use the ResetServiceSetting to change the value back to the original value defined by the Amazon Web Services service team.

Query the current service setting for the Amazon Web Services account.

Link to this function

label_parameter_version(client, input, options \\ [])

View Source

A parameter label is a user-defined alias to help you manage different versions of a parameter.

When you modify a parameter, Amazon Web Services Systems Manager automatically saves a new version and increments the version number by one. A label can help you remember the purpose of a parameter when there are multiple versions.

Parameter labels have the following requirements and restrictions.

* A version of a parameter can have a maximum of 10 labels.

* You can't attach the same label to different versions of the same parameter. For example, if version 1 has the label Production, then you can't attach Production to version 2.

* You can move a label from one version of a parameter to another.

* You can't create a label when you create a new parameter. You must attach a label to a specific version of a parameter.

* If you no longer want to use a parameter label, then you can either delete it or move it to a different version of a parameter.

* A label can have a maximum of 100 characters.

* Labels can contain letters (case sensitive), numbers, periods (.), hyphens (-), or underscores (_).

* Labels can't begin with a number, "aws" or "ssm" (not case sensitive). If a label fails to meet these requirements, then the label isn't associated with a parameter and the system displays it in the list of InvalidLabels.

Link to this function

list_association_versions(client, input, options \\ [])

View Source

Retrieves all versions of an association for a specific association ID.

Link to this function

list_associations(client, input, options \\ [])

View Source

Returns all State Manager associations in the current Amazon Web Services account and Amazon Web Services Region.

You can limit the results to a specific State Manager association document or managed node by specifying a filter. State Manager is a capability of Amazon Web Services Systems Manager.

Link to this function

list_command_invocations(client, input, options \\ [])

View Source

An invocation is copy of a command sent to a specific managed node.

A command can apply to one or more managed nodes. A command invocation applies to one managed node. For example, if a user runs SendCommand against three managed nodes, then a command invocation is created for each requested managed node ID. ListCommandInvocations provide status about command execution.

Link to this function

list_commands(client, input, options \\ [])

View Source

Lists the commands requested by users of the Amazon Web Services account.

Link to this function

list_compliance_items(client, input, options \\ [])

View Source

For a specified resource ID, this API operation returns a list of compliance statuses for different resource types.

Currently, you can only specify one resource ID per call. List results depend on the criteria specified in the filter.

Link to this function

list_compliance_summaries(client, input, options \\ [])

View Source

Returns a summary count of compliant and non-compliant resources for a compliance type.

For example, this call can return State Manager associations, patches, or custom compliance types according to the filter criteria that you specify.

Link to this function

list_document_metadata_history(client, input, options \\ [])

View Source

Information about approval reviews for a version of a change template in Change Manager.

Link to this function

list_document_versions(client, input, options \\ [])

View Source

List all versions for a document.

Link to this function

list_documents(client, input, options \\ [])

View Source

Returns all Systems Manager (SSM) documents in the current Amazon Web Services account and Amazon Web Services Region.

You can limit the results of this request by using a filter.

Link to this function

list_inventory_entries(client, input, options \\ [])

View Source

A list of inventory items returned by the request.

Link to this function

list_nodes(client, input, options \\ [])

View Source

Takes in filters and returns a list of managed nodes matching the filter criteria.

Link to this function

list_nodes_summary(client, input, options \\ [])

View Source

Generates a summary of managed instance/node metadata based on the filters and aggregators you specify.

Results are grouped by the input aggregator you specify.

Link to this function

list_ops_item_events(client, input, options \\ [])

View Source

Returns a list of all OpsItem events in the current Amazon Web Services Region and Amazon Web Services account.

You can limit the results to events associated with specific OpsItems by specifying a filter.

Link to this function

list_ops_metadata(client, input, options \\ [])

View Source

Amazon Web Services Systems Manager calls this API operation when displaying all Application Manager OpsMetadata objects or blobs.

Link to this function

list_resource_compliance_summaries(client, input, options \\ [])

View Source

Returns a resource-level summary count.

The summary includes information about compliant and non-compliant statuses and detailed compliance-item severity counts, according to the filter criteria you specify.

Link to this function

list_resource_data_sync(client, input, options \\ [])

View Source

Lists your resource data sync configurations.

Includes information about the last time a sync attempted to start, the last sync status, and the last time a sync successfully completed.

The number of sync configurations might be too large to return using a single call to ListResourceDataSync. You can limit the number of sync configurations returned by using the MaxResults parameter. To determine whether there are more sync configurations to list, check the value of NextToken in the output. If there are more sync configurations to list, you can request them by specifying the NextToken returned in the call to the parameter of a subsequent call.

Link to this function

list_tags_for_resource(client, input, options \\ [])

View Source

Returns a list of the tags assigned to the specified resource.

For information about the ID format for each supported resource type, see AddTagsToResource.

Link to this function

metadata()

View Source
Link to this function

modify_document_permission(client, input, options \\ [])

View Source

Shares a Amazon Web Services Systems Manager document (SSM document)publicly or privately.

If you share a document privately, you must specify the Amazon Web Services user IDs for those people who can use the document. If you share a document publicly, you must specify All as the account ID.

Link to this function

put_compliance_items(client, input, options \\ [])

View Source

Registers a compliance type and other compliance details on a designated resource.

This operation lets you register custom compliance details with a resource. This call overwrites existing compliance information on the resource, so you must provide a full list of compliance items each time that you send the request.

ComplianceType can be one of the following:

* ExecutionId: The execution ID when the patch, association, or custom compliance item was applied.

* ExecutionType: Specify patch, association, or Custom:string.

* ExecutionTime. The time the patch, association, or custom compliance item was applied to the managed node.

* Id: The patch, association, or custom compliance ID.

* Title: A title.

* Status: The status of the compliance item. For example, approved for patches, or Failed for associations.

* Severity: A patch severity. For example, Critical.

* DocumentName: An SSM document name. For example, AWS-RunPatchBaseline.

* DocumentVersion: An SSM document version number. For example, 4.

* Classification: A patch classification. For example, security updates.

* PatchBaselineId: A patch baseline ID.

* PatchSeverity: A patch severity. For example, Critical.

* PatchState: A patch state. For example, InstancesWithFailedPatches.

* PatchGroup: The name of a patch group.

* InstalledTime: The time the association, patch, or custom compliance item was applied to the resource. Specify the time by using the following format: yyyy-MM-dd'T'HH:mm:ss'Z'

Link to this function

put_inventory(client, input, options \\ [])

View Source

Bulk update custom inventory items on one or more managed nodes.

The request adds an inventory item, if it doesn't already exist, or updates an inventory item, if it does exist.

Link to this function

put_parameter(client, input, options \\ [])

View Source

Add a parameter to the system.

Link to this function

put_resource_policy(client, input, options \\ [])

View Source

Creates or updates a Systems Manager resource policy.

A resource policy helps you to define the IAM entity (for example, an Amazon Web Services account) that can manage your Systems Manager resources. The following resources support Systems Manager resource policies.

*

OpsItemGroup - The resource policy for OpsItemGroup enables Amazon Web Services accounts to view and interact with OpsCenter operational work items (OpsItems).

*

Parameter - The resource policy is used to share a parameter with other accounts using Resource Access Manager (RAM).

To share a parameter, it must be in the advanced parameter tier. For information about parameter tiers, see Managing parameter tiers. For information about changing an existing standard parameter to an advanced parameter, see Changing a standard parameter to an advanced parameter.

To share a SecureString parameter, it must be encrypted with a customer managed key, and you must share the key separately through Key Management Service. Amazon Web Services managed keys cannot be shared. Parameters encrypted with the default Amazon Web Services managed key can be updated to use a customer managed key instead. For KMS key definitions, see KMS concepts in the Key Management Service Developer Guide.

While you can share a parameter using the Systems Manager PutResourcePolicy operation, we recommend using Resource Access Manager (RAM) instead. This is because using PutResourcePolicy requires the extra step of promoting the parameter to a standard RAM Resource Share using the RAM PromoteResourceShareCreatedFromPolicy API operation. Otherwise, the parameter won't be returned by the Systems Manager DescribeParameters API operation using the --shared option.

For more information, see Sharing a parameter in the Amazon Web Services Systems Manager User Guide

Link to this function

register_default_patch_baseline(client, input, options \\ [])

View Source

Defines the default patch baseline for the relevant operating system.

To reset the Amazon Web Services-predefined patch baseline as the default, specify the full patch baseline Amazon Resource Name (ARN) as the baseline ID value. For example, for CentOS, specify arn:aws:ssm:us-east-2:733109147000:patchbaseline/pb-0574b43a65ea646ed instead of pb-0574b43a65ea646ed.

Link to this function

register_patch_baseline_for_patch_group(client, input, options \\ [])

View Source

Registers a patch baseline for a patch group.

Link to this function

register_target_with_maintenance_window(client, input, options \\ [])

View Source

Registers a target with a maintenance window.

Link to this function

register_task_with_maintenance_window(client, input, options \\ [])

View Source

Adds a new task to a maintenance window.

Link to this function

remove_tags_from_resource(client, input, options \\ [])

View Source

Removes tag keys from the specified resource.

Link to this function

reset_service_setting(client, input, options \\ [])

View Source

ServiceSetting is an account-level setting for an Amazon Web Services service.

This setting defines how a user interacts with or uses a service or a feature of a service. For example, if an Amazon Web Services service charges money to the account based on feature or service usage, then the Amazon Web Services service team might create a default setting of "false". This means the user can't use this feature unless they change the setting to "true" and intentionally opt in for a paid feature.

Services map a SettingId object to a setting value. Amazon Web Services services teams define the default value for a SettingId. You can't create a new SettingId, but you can overwrite the default value if you have the ssm:UpdateServiceSetting permission for the setting. Use the GetServiceSetting API operation to view the current value. Use the UpdateServiceSetting API operation to change the default setting.

Reset the service setting for the account to the default value as provisioned by the Amazon Web Services service team.

Link to this function

resume_session(client, input, options \\ [])

View Source

Reconnects a session to a managed node after it has been disconnected.

Connections can be resumed for disconnected sessions, but not terminated sessions.

This command is primarily for use by client machines to automatically reconnect during intermittent network issues. It isn't intended for any other use.

Link to this function

send_automation_signal(client, input, options \\ [])

View Source

Sends a signal to an Automation execution to change the current behavior or status of the execution.

Link to this function

send_command(client, input, options \\ [])

View Source

Runs commands on one or more managed nodes.

Link to this function

start_associations_once(client, input, options \\ [])

View Source

Runs an association immediately and only one time.

This operation can be helpful when troubleshooting associations.

Link to this function

start_automation_execution(client, input, options \\ [])

View Source

Initiates execution of an Automation runbook.

Link to this function

start_change_request_execution(client, input, options \\ [])

View Source

Creates a change request for Change Manager.

The Automation runbooks specified in the change request run only after all required approvals for the change request have been received.

Link to this function

start_execution_preview(client, input, options \\ [])

View Source

Initiates the process of creating a preview showing the effects that running a specified Automation runbook would have on the targeted resources.

Link to this function

start_session(client, input, options \\ [])

View Source

Initiates a connection to a target (for example, a managed node) for a Session Manager session.

Returns a URL and token that can be used to open a WebSocket connection for sending input and receiving outputs.

Amazon Web Services CLI usage: start-session is an interactive command that requires the Session Manager plugin to be installed on the client machine making the call. For information, see Install the Session Manager plugin for the Amazon Web Services CLI in the Amazon Web Services Systems Manager User Guide.

Amazon Web Services Tools for PowerShell usage: Start-SSMSession isn't currently supported by Amazon Web Services Tools for PowerShell on Windows local machines.

Link to this function

stop_automation_execution(client, input, options \\ [])

View Source

Stop an Automation that is currently running.

Link to this function

terminate_session(client, input, options \\ [])

View Source

Permanently ends a session and closes the data connection between the Session Manager client and SSM Agent on the managed node.

A terminated session can't be resumed.

Link to this function

unlabel_parameter_version(client, input, options \\ [])

View Source

Remove a label or labels from a parameter.

Link to this function

update_association(client, input, options \\ [])

View Source

Updates an association.

You can update the association name and version, the document version, schedule, parameters, and Amazon Simple Storage Service (Amazon S3) output. When you call UpdateAssociation, the system removes all optional parameters from the request and overwrites the association with null values for those parameters. This is by design. You must specify all optional parameters in the call, even if you are not changing the parameters. This includes the Name parameter. Before calling this API action, we recommend that you call the DescribeAssociation API operation and make a note of all optional parameters required for your UpdateAssociation call.

In order to call this API operation, a user, group, or role must be granted permission to call the DescribeAssociation API operation. If you don't have permission to call DescribeAssociation, then you receive the following error:

An error
occurred (AccessDeniedException) when calling the UpdateAssociation operation:
User:
isn't authorized to perform: ssm:DescribeAssociation on resource:

When you update an association, the association immediately runs against the specified targets. You can add the ApplyOnlyAtCronInterval parameter to run the association during the next schedule run.

Link to this function

update_association_status(client, input, options \\ [])

View Source

Updates the status of the Amazon Web Services Systems Manager document (SSM document) associated with the specified managed node.

UpdateAssociationStatus is primarily used by the Amazon Web Services Systems Manager Agent (SSM Agent) to report status updates about your associations and is only used for associations created with the InstanceId legacy parameter.

Link to this function

update_document(client, input, options \\ [])

View Source

Updates one or more values for an SSM document.

Link to this function

update_document_default_version(client, input, options \\ [])

View Source

Set the default version of a document.

If you change a document version for a State Manager association, Systems Manager immediately runs the association unless you previously specifed the apply-only-at-cron-interval parameter.

Link to this function

update_document_metadata(client, input, options \\ [])

View Source

Updates information related to approval reviews for a specific version of a change template in Change Manager.

Link to this function

update_maintenance_window(client, input, options \\ [])

View Source

Updates an existing maintenance window.

Only specified parameters are modified.

The value you specify for Duration determines the specific end time for the maintenance window based on the time it begins. No maintenance window tasks are permitted to start after the resulting endtime minus the number of hours you specify for Cutoff. For example, if the maintenance window starts at 3 PM, the duration is three hours, and the value you specify for Cutoff is one hour, no maintenance window tasks can start after 5 PM.

Link to this function

update_maintenance_window_target(client, input, options \\ [])

View Source

Modifies the target of an existing maintenance window.

You can change the following:

* Name

* Description

* Owner

* IDs for an ID target

* Tags for a Tag target

* From any supported tag type to another. The three supported tag types are ID target, Tag target, and resource group. For more information, see Target.

If a parameter is null, then the corresponding field isn't modified.

Link to this function

update_maintenance_window_task(client, input, options \\ [])

View Source

Modifies a task assigned to a maintenance window.

You can't change the task type, but you can change the following values:

*

TaskARN. For example, you can change a RUN_COMMAND task from AWS-RunPowerShellScript to AWS-RunShellScript.

*

ServiceRoleArn

*

TaskInvocationParameters

*

Priority

*

MaxConcurrency

*

MaxErrors

One or more targets must be specified for maintenance window Run Command-type tasks. Depending on the task, targets are optional for other maintenance window task types (Automation, Lambda, and Step Functions). For more information about running tasks that don't specify targets, see Registering maintenance window tasks without targets in the Amazon Web Services Systems Manager User Guide.

If the value for a parameter in UpdateMaintenanceWindowTask is null, then the corresponding field isn't modified. If you set Replace to true, then all fields required by the RegisterTaskWithMaintenanceWindow operation are required for this request. Optional fields that aren't specified are set to null.

When you update a maintenance window task that has options specified in TaskInvocationParameters, you must provide again all the TaskInvocationParameters values that you want to retain. The values you don't specify again are removed. For example, suppose that when you registered a Run Command task, you specified TaskInvocationParameters values for Comment, NotificationConfig, and OutputS3BucketName. If you update the maintenance window task and specify only a different OutputS3BucketName value, the values for Comment and NotificationConfig are removed.

Link to this function

update_managed_instance_role(client, input, options \\ [])

View Source

Changes the Identity and Access Management (IAM) role that is assigned to the on-premises server, edge device, or virtual machines (VM).

IAM roles are first assigned to these hybrid nodes during the activation process. For more information, see CreateActivation.

Link to this function

update_ops_item(client, input, options \\ [])

View Source

Edit or change an OpsItem.

You must have permission in Identity and Access Management (IAM) to update an OpsItem. For more information, see Set up OpsCenter in the Amazon Web Services Systems Manager User Guide.

Operations engineers and IT professionals use Amazon Web Services Systems Manager OpsCenter to view, investigate, and remediate operational issues impacting the performance and health of their Amazon Web Services resources. For more information, see Amazon Web Services Systems Manager OpsCenter in the Amazon Web Services Systems Manager User Guide.

Link to this function

update_ops_metadata(client, input, options \\ [])

View Source

Amazon Web Services Systems Manager calls this API operation when you edit OpsMetadata in Application Manager.

Link to this function

update_patch_baseline(client, input, options \\ [])

View Source

Modifies an existing patch baseline.

Fields not specified in the request are left unchanged.

For information about valid key-value pairs in PatchFilters for each supported operating system type, see PatchFilter.

Link to this function

update_resource_data_sync(client, input, options \\ [])

View Source

Update a resource data sync.

After you create a resource data sync for a Region, you can't change the account options for that sync. For example, if you create a sync in the us-east-2 (Ohio) Region and you choose the Include only the current account option, you can't edit that sync later and choose the

Include all accounts from my Organizations
configuration

option. Instead, you must delete the first resource data sync, and create a new one.

This API operation only supports a resource data sync that was created with a SyncFromSource SyncType.

Link to this function

update_service_setting(client, input, options \\ [])

View Source

ServiceSetting is an account-level setting for an Amazon Web Services service.

This setting defines how a user interacts with or uses a service or a feature of a service. For example, if an Amazon Web Services service charges money to the account based on feature or service usage, then the Amazon Web Services service team might create a default setting of "false". This means the user can't use this feature unless they change the setting to "true" and intentionally opt in for a paid feature.

Services map a SettingId object to a setting value. Amazon Web Services services teams define the default value for a SettingId. You can't create a new SettingId, but you can overwrite the default value if you have the ssm:UpdateServiceSetting permission for the setting. Use the GetServiceSetting API operation to view the current value. Or, use the ResetServiceSetting to change the value back to the original value defined by the Amazon Web Services service team.

Update the service setting for the account.