Configuring a Windows Instance Using SSM Config
Amazon EC2 Systems Manager (SSM) enables you to remotely manage the configuration of your Amazon EC2 instances, virtual machines (VMs), or servers in your on-premises environment or in an environment provided by other cloud providers using scripts, commands, or the Amazon EC2 console. SSM includes a lightweight instance configuration solution called SSM Config and an on-demand solution called Amazon EC2 Run Command. For more information about Run Command, see Systems Manager Remote Management (Run Command).
SSM Config helps you manage the configuration of your Windows instances while they're running. You create an SSM document that specifies the actions the system should perform on your instances, including which applications to install, which AWS Directory Service directory to join, which Microsoft PowerShell modules to install, etc. If an instance is missing one or more of these configurations, the system makes those changes. By default, the system checks every five minutes to see if there is a new configuration to apply. If so, the system updates the instances. In this way, you can remotely maintain a consistent configuration baseline on your instances. SSM Config is available using the AWS CLI or the AWS Tools for Windows PowerShell.