Amazon EC2 Systems Manager
User Guide

Updating the SSM Agent Using Amazon EC2 Run Command

You can use the AWS-UpdateSSMAgent document to update the Amazon EC2 SSM agent running on your Windows and Linux instances. You can update to either the latest version or downgrade to an older version. When you execute the command, the system downloads the version from AWS, installs it, and then uninstalls the version that existed before the command was run. If an error occurs during this process, the system rolls back to the version on the server before the command was run and the command status shows that the command failed.


This procedure does not include information about how to configure Run Command for Amazon SNS notifications. To learn more about how to execute commands that return notifications, see Configuring Amazon SNS Notifications for Run Command.

To update the SSM Agent using Run Command

  1. Open the Amazon EC2 console at

  2. In the navigation pane, choose Run Command.

  3. Choose Run a command.

  4. For Command document, choose AWS-UpdateSSMAgent.

  5. For Target instances, choose the instances where you want the command to run. If you do not see an instance in this list, it might not be configured properly for Run Command. For more information, see Systems Manager Prerequisites.

  6. (Optional) For Version, type the version of the SSM agent to install. You can install older versions of the agent. If you do not specify a version, the service latest version is installed.

  7. (Optional) For Allow Downgrade, choose true to install an earlier version of the SSM agent. If you choose this option, you must specify the earlier version number. Choose false to install only the newest version of the service.

  8. For Comment, we recommend providing information that will help you identify this command in your list of commands.

  9. For Timeout (seconds), type the number of seconds that Run Command should attempt to reach an instance before it is considered unreachable and the command execution fails. The minimum is 30 seconds, the maximum is 30 days, and the default is 10 minutes.

  10. For S3 bucket, type the name of the S3 bucket for the command output.


    The Run Command Output page in the Amazon EC2 console truncates output after 2500 characters. Configure an Amazon S3 bucket before executing commands using Run Command. If your command output was longer than 2500 characters, you can view the full output in your Amazon S3 bucket. For more information, see Create a Bucket.

  11. For S3 key prefix, type the name of a subfolder in the S3 bucket. A subfolder can help you organize Run Command output if you execute multiple commands against multiple instances.

For information about how to run commands using the AWS CLI, see the Systems Manager Run Command Walkthrough Using the AWS CLI or the SSM CLI Reference.

Canceling a Command

You can attempt to cancel a command as long as the service shows that it is in either a Pending or Executing state. However, even if a command is still in one of these states, we cannot guarantee that the command will be terminated and the underlying process stopped.

To cancel a command using the console

  1. In the navigation pane, choose Run Command.

  2. Select the command invocation that you want to cancel.

  3. Choose Actions, Cancel Command.

To cancel a command using the AWS CLI

Use the following command.

aws ssm cancel-command --command-id "command ID" --instance-ids "instance ID"

For information about the status of a cancelled command, see Setting Up Events and Notifications.

View Command Output

Use the following procedure to view the results of command execution in the EC2 console.

To view command output

  1. In the Amazon EC2 console, select a command in the list.

  2. Choose the Output tab.

  3. Choose View Output.

  4. The command output page shows the results of your command execution.