riponbanik.ansible_role_aws_ssm_agent

Ansible role to install and configure AWS Systems Manager Agent on Windows and Linux

Requirements

None.

Role Variables

Here are the available variables and their default values (see defaults/main.yml):

AWS lets you monitor Windows metrics and logs using the CloudWatch plugin, which is turned off by default:

cloudwatch_monitoring: false
cloudwatch_namespace: 'Windows/Default'
cloudwatch_log_group: 'Default-Log-Group'

application_event_log_level: 3
system_event_log_level: 3
security_event_log_level: 1

To avoid downloading and upgrading the package unless there’s a change:

force_upgrade: no

You can use a custom CloudWatch template. For example, you can place the following in the same directory as the playbook:

aws_ssm_config_template_path: 'templates/CloudwatchWindowsPlugin.json'

To activate in a Multi-Account or On-Prem setup:

aws_ssm_activation_code: 1234567890
aws_ssm_activation_id: 1234567890
ws_ssm_ec2_region: ap-southeast-2

Dependencies

None.

Example Playbook

- hosts: all
  roles:
    - { role: riponbanik.aws-ssm-agent }

License

MIT / BSD

Author Information

This role was created in 2018 by Ripon Banik