SSM checking file on node

Question

Hey all, I have a question about using SSM to verify a config. I'm setting up a proof of concept and the last thing I'd like to figure out is if it's possible to check a specific file on a node and see what its contents is. I have hybrid ubuntu nodes and there's a specific file which is used in our application that I'd love to be able to check. Can I do something like that and if it's not too much trouble could someone point me to some resource which would help me figure out how? Ultimately if we go this way I see SSM checking a bunch of things and possibly even managing it automatically but we'll get there.

Thank you so much.

Answer

Consider running a Bash script using SSM Run Command to send a command that returns status notifications. Some references:
* [Use Run Command to send a command that returns status notifications](https://docs.aws.amazon.com/systems-manager/latest/userguide/monitoring-sns-rc-send.html)
* [Run a Bash script using Run Command](https://docs.aws.amazon.com/systems-manager/latest/userguide/walkthrough-cli.html#walkthrough-cli-example-3)

Some other avenues that may be of use
* [How do I monitor security-related changes made to the file system on my EC2 Linux instance?](https://aws.amazon.com/premiumsupport/knowledge-center/ec2-monitor-file-system-changes/)
* [osquery](https://osquery.io/)

Answer

Oh wow, those are super useful resources thank you!!

SSM checking file on node

Relevanter Inhalt