4回答
- 新しい順
- 投票が多い順
- コメントが多い順
0
Could you please upgrade SSM Agent to latest version and try Session Manager from console? If issue still persists, kindly look for any errors in SSM Agent logs.
Thanks!
回答済み 5年前
0
It has to do with the KMS key, I've put in a custom KMS key instead of the default TLS one and that causes the issue. Will have to look into it some other day as I need to continue with the setup. I thought I set the permissions on the key correct but maybe I've overlooked something.
回答済み 5年前
0
I am also having the same error and please find below the extract from SSM agent logs. I am having this issue only while using KMS key for session encryption
2020-06-18 07:24:05 INFO [ssm-session-worker] [aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b] document: aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b worker started
2020-06-18 07:24:05 INFO [ssm-session-worker] [aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b] channel: aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b found
2020-06-18 07:24:05 INFO [ssm-session-worker] [aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b] inter process communication started
2020-06-18 07:24:05 INFO [ssm-session-worker] [aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b] [DataBackend] received plugin config message
2020-06-18 07:24:05 INFO [ssm-session-worker] [aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b] [DataBackend] {"DocumentInformation":{"DocumentID":"aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b","CommandID":"aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b","AssociationID":"","InstanceID":"i-089a4582db171334c","MessageID":"aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b","RunID":"2020-06-18T07-24-05.615Z","CreatedDate":"52433-03-17 09:33:34 +0000 UTC","DocumentName":"","DocumentVersion":"","DocumentStatus":"InProgress","RunCount":0,"ProcInfo":{"Pid":31185,"StartTime":"2020-06-18T07:24:05.616193696Z"},"ClientId":"","RunAsUser":""},"DocumentType":"StartSession","SchemaVersion":"1.0","InstancePluginsInformation":[{"Configuration":{"Settings":null,"Properties":null,"OutputS3KeyPrefix":"","OutputS3BucketName":"","S3EncryptionEnabled":true,"CloudWatchLogGroup":"","CloudWatchEncryptionEnabled":true,"OrchestrationDirectory":"/var/lib/amazon/ssm/i-089a4582db171334c/session/orchestration/aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b/Standard_Stream","MessageId":"aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b","BookKeepingFileName":"aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b","PluginName":"Standard_Stream","PluginID":"Standard_Stream","DefaultWorkingDirectory":"","Preconditions":null,"IsPreconditionEnabled":false,"CurrentAssociations":null,"SessionId":"aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b","ClientId":"","KmsKeyId":"f9451b69-559d-4f1d-9fe8-684f9a465711","RunAsEnabled":false,"RunAsUser":""},"Name":"Standard_Stream","Result":{"pluginID":"","pluginName":"","status":"","code":0,"output":null,"startDateTime":"0001-01-01T00:00:00Z","endDateTime":"0001-01-01T00:00:00Z","outputS3BucketName":"","outputS3KeyPrefix":"","stepName":"","error":"","standardOutput":"","standardError":""},"Id":"Standard_Stream"}],"CancelInformation":{"CancelMessageID":"","CancelCommandID":"","Payload":"","DebugInfo":""},"IOConfig":{"OrchestrationDirectory":"/var/lib/amazon/ssm/i-089a4582db171334c/session/orchestration/aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b","OutputS3BucketName":"","OutputS3KeyPrefix":"","CloudWatchConfig":{"LogGroupName":"","LogStreamPrefix":"","LogGroupEncryptionEnabled":false}}}
2020-06-18 07:24:05 INFO [ssm-session-worker] [aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b] [DataBackend] Running plugin Standard_Stream
2020-06-18 07:24:05 INFO [ssm-session-worker] [aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b] [DataBackend] [pluginName=Standard_Stream] Setting up datachannel for session: aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b, requestId: 0b73fbe8-fec8-44e2-b8cd-84da1896281a, clientId:
2020-06-18 07:24:05 INFO [ssm-session-worker] [aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b] [DataBackend] [pluginName=Standard_Stream] Opening websocket connection to: wss://ssmmessages.eu-central-1.amazonaws.com/v1/data-channel/aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b?role=publish_subscribe
2020-06-18 07:24:05 INFO [ssm-session-worker] [aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b] [DataBackend] [pluginName=Standard_Stream] Successfully opened websocket connection to: wss://ssmmessages.eu-central-1.amazonaws.com/v1/data-channel/aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b?role=publish_subscribe
2020-06-18 07:24:05 INFO [ssm-session-worker] [aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b] [DataBackend] [pluginName=Standard_Stream] Initiating Handshake
2020-06-18 07:24:11 WARN [ssm-session-worker] [aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b] [DataBackend] [pluginName=Standard_Stream] Unknown handshake client action found, SessionType
2020-06-18 07:24:20 ERROR [ssm-session-worker] [aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b] [DataBackend] [pluginName=Standard_Stream] Encountered error while initiating handshake. Handshake timed out. Please ensure that you have the latest version of the session manager plugin.
2020-06-18 07:24:20 INFO [ssm-session-worker] [aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b] [DataBackend] [pluginName=Standard_Stream] Closing datachannel with channel Id aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b
2020-06-18 07:24:20 INFO [ssm-session-worker] [aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b] [DataBackend] [pluginName=Standard_Stream] Closing websocket channel connection to: wss://ssmmessages.eu-central-1.amazonaws.com/v1/data-channel/aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b?role=publish_subscribe
2020-06-18 07:24:20 INFO [ssm-session-worker] [aztecse-tu-ics-dlt-test-infraadmin-0ed1bc492dde6bf3b] [DataBackend] [pluginName=Standard_Stream] Successfully closed websocket connection to: 10.251.9.96:443
The error message I could identify is Unknown handshake client action found, SessionType
Could you please look
回答済み 4年前
関連するコンテンツ
- 質問済み 6年前
- AWS公式更新しました 1年前
- AWS公式更新しました 3年前
- AWS公式更新しました 10ヶ月前
In my case iam using custom KSM Key for SSM Session .. some one delete the Key accidently. on AWS Systems Manager => Session Manager => Preferences => KMS encryption - I disabled this it could able to connect with SSM Later planning to create a new KMS for SSM