AWS re:Post을(를) 사용하면 다음에 동의하게 됩니다. AWS re:Post 이용 약관
AWS re:Postre:Post

I want to create a folder in the shared top directory of FSx.

0

I want to create a folder in the shared top directory of FSx. Flow Powershell commands using ssm's AWS-RunPowerShellScript. However, the executing user is ssm-user. This user is not an active directory user and access is denied. The New-Item command does not set credentials. Is it possible to create a folder in the FSx shared top directory by running the powershell command from ssm?

주제
보안, 신원 및 규정 준수관리 및 거버넌스스토리지
태그
AWS 디렉터리 서비스AWS 시스템 관리자아마존 Windows File Server용 FSx윈도우 파워셸용 AWS 도구
언어
English
AWS-User-0207697
질문됨 2년 전614회 조회
1개 답변
1

A similar question was asked here and has two different approaches on how to solve issues like this.

  • Fetching AD User credentials from Secrets Manager
  • Granting the AD Computer object permission to execute the command

See the answer section for more details.
https://repost.aws/questions/QU0nNAbP6mTNiszw8JqzX1rQ/about-the-user-who-executes-ssm

profile pictureAWS
JoeD_AWS
답변함 2년 전
  • AWS-User-0207697
    2년 전

    Thank you for your response. The New-Item command does not allow optional credentials. Therefore, I would like to give permissions to the computer object. But I don't know how to do that. If you know how to do that, please let me know. Thank you so much.

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠