[AWS]AWS Systems Managerを利用する

実行

$ aws ssm start-session --target i-instanceid --document-name AWS-StartPortForwardingSessionToRemoteHost --parameters '{"portNumber":["443"],"localPortNumber":["1443"]}' --profile xxxx

※ i-instanceid は適宜変更。

# コマンド実行時 Starting session with SessionId: hoge-xxxxxxx Port 1443 opened for sessionId hoge-xxxxxxx. Waiting for connections... # 接続すると Connection accepted for session [hoge-xxxxxxx] Exiting session with sessionId: hoge-xxxxxxx.

Tips

SessionManagerPlugin をインストールする。

aws ssmを実行すると、SessionManagerPlugin is not found. Please refer to SessionManager Documentation here: http://docs.aws.amazon.com/console/systems-manager/session-manager-plugin-not-found が表示される。

下記に従ってダウンロードする。（Macの場合） https://docs.aws.amazon.com/ja_jp/systems-manager/latest/userguide/install-plugin-macos-overview.html

$ curl "https://s3.amazonaws.com/session-manager-downloads/plugin/latest/mac_arm64/sessionmanager-bundle.zip" -o "sessionmanager-bundle.zip" $ unzip sessionmanager-bundle.zip Archive: sessionmanager-bundle.zip creating: sessionmanager-bundle/ inflating: sessionmanager-bundle/NOTICE inflating: sessionmanager-bundle/install creating: sessionmanager-bundle/bin/ inflating: sessionmanager-bundle/bin/session-manager-plugin inflating: sessionmanager-bundle/README.md inflating: sessionmanager-bundle/THIRD-PARTY extracting: sessionmanager-bundle/VERSION inflating: sessionmanager-bundle/LICENSE inflating: sessionmanager-bundle/seelog.xml.template inflating: sessionmanager-bundle/RELEASENOTES.md $ sudo ./sessionmanager-bundle/install -i /usr/local/sessionmanagerplugin -b /usr/local/bin/session-manager-plugin Creating install directories: /usr/local/sessionmanagerplugin/bin Creating Symlink from /usr/local/sessionmanagerplugin/bin/session-manager-plugin to /usr/local/bin/session-manager-plugin Installation successful!

接続先でエージェントの動作確認

https://docs.aws.amazon.com/ja_jp/systems-manager/latest/userguide/ami-preinstalled-agent.html

$ sudo systemctl status amazon-ssm-agent || sudo status amazon-ssm-agent sudo: systemctl: command not found amazon-ssm-agent start/running, process 1701