How to use EventBridge with Systems Manager Run Command to run shell commands?

Question

I'm trying to use EventBridge to listen for EC2 autoscaling termination events, and send a shell command to the instance to do some work before the instance terminates.

I followed this guide: https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-ec2-run-command.html
However, it doesn't explain how Target Key and Target Value input boxes are used. I don't understand why it uses tag:environment in this case.
I assume I'm supposed to input the instance id of the EC2 instance, and I know that the instance id is in the json body of the termination event. Is there a way I can pass variables to the Target Key and Target Value?

Accepted Answer

The Target Key and Target Value is used to identify which instance(s) to run the command against. Target Key can either be an instance tag key (e.g., environment), or the literal value InstanceIds to indicate that the command should be run against a specific list of instance IDs. Target Value is a list either of tag values, if a tag key was specified for the target key (e.g., production), or a list of EC2 instance IDs.

Source: https://docs.aws.amazon.com/eventbridge/latest/APIReference/API_RunCommandTarget.html

EventBridge supports fetching data out of the event and passing it to the target via Transforms. See the transforms documentation for additional details.

Source: https://docs.aws.amazon.com/eventbridge/latest/APIReference/API_RunCommandTarget.html

EventBridge supports fetching data out of the event and passing it to the target via *Transforms*. See the [transforms documentation](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-transform-target-input.html) for additional details.

Answer

I have this exact same need. I have instances in an ASG that need something to happen post-boot. Specifically, I am trying to get the CodeDeploy agent installed via the SSM Document that is used by Distributor.

Its not intuitive, but the solution to this is to create an SSM Automation and *not* Run/Send Command. If you use an Automation then you can write the EventBridge rule to target that then use the input transform. The automation will digest the input into a Target for the automation. Not great as it adds an obfuscating layer, but it is what it is.

For my specific use case, I have also explored:
Creating an EventBridge rule for each autoscaling group (yuck)
Targeting the Run Command for every piece of running equipment (yuck)

How to use EventBridge with Systems Manager Run Command to run shell commands?

Relevant content