SSM Automation Document in State Manager error InvalidAutomationParameters

0

I'm getting an InvalidAutomationParameters error after running a State Manager Association that uses an SSM Automation Document. I am having the same issue with all SSM Automation Documents I'm trying, but currently trying the AWS-RestartEC2Instance Automation Document. I have no issues running the Automation manually. I have no issues creating the State Manager Association, providing both parameters AutomationAssumeRole and InstanceId (I'm using AWSServiceRoleForAmazonSSM and a valid running Instance). However, whenever I run the Association, it fails with InvalidAutomationParameters error. If anybody can get this running properly, please provide what options used when creating the association.

TBO
已提問 10 個月前檢視次數 835 次
1 個回答
0
已接受的答案

Name:test
Document:AWS-RestartEC2Instance
Execution:Simple execution
InstanceId:i-xxxxxxxxx (your instance id)
AutomationAssumeRole:SSMAutomationRole
Specify schedule:On Schedule
Specify with:CRON/Rate expression
CRON/Rate expression:rate(30 minutes)

ssm1

The execution is successful with this configuration.

profile picture
專家
已回答 10 個月前
profile picture
專家
已審閱 10 個月前
  • Thanks for your reply, I've done everything the same as your setup except for the AutomationAssumeRole and is still failing for me with the same error. AWS documentation and the note on the Create Association page say to use the service-linked role AWSServiceRoleForAmazonSSM. Looks like the SSMAutomationRole you are using is not built-in, can you please tell me what policies are attached to that role?

  • The AutomationAssumeRole is created using the procedure described in this document. https://docs.aws.amazon.com/systems-manager/latest/userguide/automation-setup-iam.html
    The policy used is "AmazonSSMAutomationRole".

  • Thanks for the help. Creating a new role as described in the document got it working for me. The note on the Create Association page to use the service-linked role AWSServiceRoleForAmazonSSM is what threw we off.

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南