Auto interaction with EC2 through the CLI.

Question

I'm using a linux shell script file ( .sh ), writing commands ( CLI ) to be able to automate tasks in the account, such as: Create instances, list, connect and more... instantiates through the ( CLI ) declared in the.sh file, the other linux commands ( sudo su, cd / and others... ) are not automatically executed in the instance. How can I make it so? There is some kind of ( CLI ) AWS specifies for this, like ( aws ec2 sudo su )... Below is the code snippet related to the .sh file :

scrip-shell-linux.sh
```
#!/bin/bash

# Etapa 1
# Configuração das credenciais da AWS e estabelecimento da conexão
echo "Estabelecendo conexão com a conta ( AWS ) . . ."
export AWS_ACCESS_KEY_ID="...."
export AWS_SECRET_ACCESS_KEY="...."
sleep 3
echo "Conexão estabelecida a conta ( AWS )."

# Etapa 2
# Listar as instancias ec2 e definir qual delas acessar
json=$(aws ec2 describe-instances --region us-east-1)
# Extrai o valor da chave InstanceId usando o jq
instance_id=$(echo "$json" | jq -r '.Reservations[0].Instances[0].InstanceId')

# Connect to an instance using the instance ID and an EC2 Instance Connect Endpoint
aws ec2-instance-connect ssh --instance-id $instance_id --connection-type eice --region us-east-1

# ( 0v0 ) -> After the connection, the commands below are no longer interpreted by the instance ?
sudo su
cd /
apt update && sudo apt upgrade
```

secondabhi_aws · Answer

Hi,

AWS Systems Manager does exactly what you need here. Please follow [Walkthrough: Use the AWS CLI with Run Command](https://docs.aws.amazon.com/systems-manager/latest/userguide/walkthrough-cli.html) step by step and you'd be easily able to do what you want to run on EC2 machine through SSM.

Here below is how would you do it:

1. Attach an IAM role to instance:
The ec2 instance should have an IAM role with policy AmazonSSMFullAccess. This would enable instance to communicate with the Systems Manager API.

2. Install SSM Agent:
Install SSM agent on EC2 instance. The SSM Agent process the run command requests & configure the instance as per command.

3. Run command through CLI something like as below:
aws ssm send-command --document-name "AWS-RunShellScript" --comment "running processes" --instance-ids "Instance-ID" --parameters commands="pe -ef" --region us-east-1 --output text

If you don't want to this way, you can always ssh to ec2 and then you are technically on EC2 instance and can run whatever you need.

Behrang_KS · Answer

ec2-instance-connect is less flexible compared to ssh command. With ssh command you can run your commands line by line or pipe them to the ssh command but you cannot do that with EC2 Instance Connect. To see how to connect to your EC2 instance using ssh, you can look [here](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AccessingInstancesLinux.html#AccessingInstancesLinuxSSHClient).

Auto interaction with EC2 through the CLI.

Connect to an instance using the instance ID and an EC2 Instance Connect Endpoint

Relevant content