Questions[aws-systems-manager](server)

I am trying to list all the images which has the name Ansible*.

If i can pull it off, i can use it to clean my AMI's that are created during patching activity. i am trying it via SSM Automation Document. below is the code i have.

description: This document is to remove AMI
schemaVersion: '0.3'
assumeRole: '{{ AutomationAssumeRole }}'
mainSteps:
  - name: getImageId
    action: 'aws:executeAwsApi'
    inputs:
      Service: ec2
      Api: DescribeImages
      Filters:
        - Name: 'name'
          Values:
            - 'Ansible*'
    outputs:
      - Name: ImageId
        Selector: '$.Images[0].ImageId'
        Type: String

here, Selector: '$.Images[0].ImageId' gives only the 1st image id of the list. i can get it if i can give something like Selector: '$.Images[*].ImageId' but this is not supported by the SSM document.

could someone please help me on this. all i want is, i want to list all the images with its AMI ID.

PS: i have the shell and python script which does the job,. but i am looking for AWS SSM Automation document due to roles and policy restrictions

I have been clicking through the Session Manager console. Pretty neat.

The next question I have with this - I *think we should be able to connect using SSH from an outside SSH client. Meaning, I have a client on my desktop (The client I use is called Putty). So, is it possible to connect from desktop through session manager instead of having to login to the console?

The end goal for this: In production we have a linux system that an outside marketing company connects to using SSH. Right now, we just have that system accessible to them through a public IP address. It would be more secure to use Session Manager within Systems Manager to do their connections. Session Manager would also allow us to log all activity on the system while they were logged in. But we'll worry about that later.

For now, just need to know if it's possible to connect through session manager to the instance using SSH from an external source like my desktop. And if so, how? )

I am trying to create an EC2 instance (Amazon Linux, so I shouldn't have to configure the SSM agent as it should be autoconfigured) in a private subnet, and want to be able to SSH into it. According to this post I have to use AWS Systems Manager for this. I've done quite a bit with codestar/beanstalk before, but now simply want to be able to create and delete everything via the AWS CLI manually for learning purposes.

Here are the commands I'm able to run fine (the ec2 instance is created succesfully with my role)

aws iam create-role --role-name ec2-role --assume-role-policy-document file://roles/ec2-role.json
aws iam attach-role-policy --role-name ec2-role --policy-arn "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
aws iam create-instance-profile --instance-profile-name ssm-instance-profile-for-ec2-instances
aws iam add-role-to-instance-profile --instance-profile-name ssm-instance-profile-for-ec2-instances --role-name ec2-role

// Creating the EC2 instance
aws ec2 run-instances --image-id ami-0db9040eb3ab74509 --count 1 --instance-type t2.micro --key-name key-pair-for-instance1 --subnet-id <my_valid_subnet_id> --iam-instance-profile Name=ssm-instance-profile-for-ec2-instances

I took parts of these commands from this post.

My json file for ec2-role:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": { "Service": "ec2.amazonaws.com"},
      "Action": "sts:AssumeRole"
    }
  ]
}

Unfortunately this instance isn't visible in the SSM (Systems Manager):

aws ssm describe-instance-information
{
    "InstanceInformationList": []
}

I have been following the main documentation on SSM and from what I understand from the page below is that all you would need is the AmazonSSMManagedInstanceCore policy: https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-getting-started-instance-profile.html

The web console hasn't been any help so far, according to this page it treats roles and instance-profiles as the same thing.

What am I missing here to be able to use the aws ssm command to start an ssh session?

I've been using a Windows_Server-2019-English-Full-Base-2020.12.09 EC2 instance in N.Virginia for a while and accidently got my firewall rules reset and it seems RDP port is closed and not accepting incoming connections anymore.

Is there anyway I could re-gain access to my instance?

I have a website hosted in AWS EC2 with the t2.micro instance(Ubuntu 18.04.4). When I tried to connect through Putty or browser-based SSH connection from the AWS console, i am getting a connection timeout error. I tried using the instructions in the following link to fix it, but the console is stuck after I run the first command sudo iptables -F. also my server goes down. then i have to reboot the instance from the AWS console.

Also I have added CloudFlare for this server, is it a cause of this problem?

https://aws.amazon.com/premiumsupport/knowledge-center/ec2-linux-resolve-ssh-connection-errors/

How do I resolve this problem?