How can we use Systems Manager Session Manager cross accounts? to manage instances in another AWS account

0

Hello, We have a organization and we would like to manage from a centralized account instances in another AWS account, using Session Manager in Systems Manager. Thank you.

asked 4 months ago178 views
2 Answers
2
Accepted Answer

It is possible by assuming a Role in the external account (target) from your local account (source), then starting the session. There is a blog post to explain such a scenario: https://aws.amazon.com/blogs/mt/how-to-grant-least-privilege-access-to-third-parties-on-your-private-ec2-instances-with-aws-systems-manager/

AWS
answered 4 months ago
EXPERT
reviewed 4 months ago
profile picture
EXPERT
reviewed 4 months ago
EXPERT
reviewed 4 months ago
1

Hi,

This blog post is what you're looking for https://aws.amazon.com/blogs/mt/managing-aws-resources-across-multiple-accounts-and-regions-using-aws-systems-manager-automation/

and this official documentation page as well "Running automations in multiple AWS Regions and accounts": see https://docs.aws.amazon.com/systems-manager/latest/userguide/running-automations-multiple-accounts-regions.html

Best,

Didier

profile pictureAWS
EXPERT
answered 4 months ago
profile picture
EXPERT
reviewed 4 months ago
  • To clarify a bit, the question was about SSM Session Manager, not automations.

  • Thanks for the answers and comments. Agree with Leo, it's for Session Manager and the first answer looks interesting.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions