En utilisant AWS re:Post, vous acceptez les AWS re:Post Conditions d’utilisation
AWS re:Postre:Post

I want to create a folder in the shared top directory of FSx.

0

I want to create a folder in the shared top directory of FSx. Flow Powershell commands using ssm's AWS-RunPowerShellScript. However, the executing user is ssm-user. This user is not an active directory user and access is denied. The New-Item command does not set credentials. Is it possible to create a folder in the FSx shared top directory by running the powershell command from ssm?

Sujets
Sécurité, identité et conformitéGestion et gouvernanceStockage
Balises
Service de répertoire AWSGestionnaire de systèmes AWSServeur de fichiers Amazon FSx pour WindowsAWS Tools pour Windows PowerShell
Langue
English
AWS-User-0207697
demandé il y a 2 ans603 vues
1 réponse
1

A similar question was asked here and has two different approaches on how to solve issues like this.

  • Fetching AD User credentials from Secrets Manager
  • Granting the AD Computer object permission to execute the command

See the answer section for more details.
https://repost.aws/questions/QU0nNAbP6mTNiszw8JqzX1rQ/about-the-user-who-executes-ssm

profile pictureAWS
JoeD_AWS
répondu il y a 2 ans
  • AWS-User-0207697
    il y a 2 ans

    Thank you for your response. The New-Item command does not allow optional credentials. Therefore, I would like to give permissions to the computer object. But I don't know how to do that. If you know how to do that, please let me know. Thank you so much.

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions

Contenus pertinents