Can't connect to EC2 istance using session manager

Question

hello,

I am having issues, connecting to a private EC2 instance using session manager. The EC2, has a IAM role attached with the "AmazonSSMManagedInstanceCore" policy, I have a VPC set up along with a endpoint in order to connect to the session manager.

When I try to connect using SSM I get this error message "The version of SSM Agent on the instance supports Session Manager, but the instance is not configured for use with AWS Systems Manager. Verify that the IAM instance profile attached to the instance includes the required permissions.", am not quite sure what else to, can anyone help?

Accepted Answer

Systems Manager requires three VPC endpoints to be fully managed:  
https://repost.aws/knowledge-center/ec2-systems-manager-vpc-endpoints
```
com.amazonaws.[region].ssm
com.amazonaws.[region].ec2messages
com.amazonaws.[region].ssmmessages
```

Answer

Hello.

Please share the VPC endpoint you configured.  
Also, check whether the security group configured for the VPC endpoint allows HTTPS.  
https://docs.aws.amazon.com/systems-manager/latest/userguide/setup-create-vpc.html

Answer

Sure,

Endpoint Type: Interface.
Service Name: com.amazonaws.us-east-1.ssm.

please let me know if you need anything else.

Can't connect to EC2 istance using session manager

Contenuto pertinente