Menu
AWS Systems Manager
User Guide

SSM Document Plugin Reference

Systems Manager determines the actions to perform on a managed instance by reading the contents of a Systems Manager document. Each document includes a code-execution section. Depending on the schema version of your document, this code-execution section can include one or more plugins or steps. For the purpose of this Help topic, plugins and steps are called plugins. This section includes information about each of the Systems Manager plugins. For more information about documents, including information about creating documents and the differences between schema versions, see AWS Systems Manager Documents.

Note

Some of the plugins described here run only on either Windows instances or Linux instances. Platform dependencies are noted for each plugin.

Top-level Elements

The top-level elements are common for all Systems Manager documents. Top-level elements provide the structure of the Systems Manager document.

Properties

schemaVersion

The version of the schema.

Type: Version

Required: Yes

description

A description of the configuration.

Type: String

Required: No

parameters

parameters is a structure that contains one or more parameters to execute when processing the document. You can specify parameters at runtime, in a document, or by using Systems Manager Parameter Store. For more information, see AWS Systems Manager Parameter Store.

Type: Structure

The parameters structure accepts the following fields and values:

  • type: (Required) Allowed values include the following: String, StringList, Boolean, Integer, MapList, and StringMap

  • description: (Optional) A description of the parameter.

  • default: (Optional) The default value of the parameter or a reference to a parameter in Parameter Store.

  • allowedValues: (Optional) Allowed values for the parameter.

  • allowedPattern: (Optional) The regular expression the parameter must match.

  • displayType: (Optional) Used to display either a textfield or a textarea in the AWS console. textfield is a single-line text box. textarea is a multi-line text area.

  • minItems: (Optional) The minimum number of items allowed.

  • maxItems: (Optional) The maximum number of items allowed.

  • minChars: (Optional) The minimum number of parameter characters allowed.

  • maxChars: (Optional) The maximum number of parameter characters allowed.

runtimeConfig

(Schema version 1.2 only) The configuration for the instance as applied by one or more Systems Manager plugins. Plugins are not guaranteed to run in sequence.

Type: Dictionary<string,PluginConfiguration>

Required: No

mainSteps

(Schema version 0.3, 2.0, and 2.2 only) The configuration for the instance as applied by one or more Systems Manager plugins. Plugins are organized as actions within steps. Steps execute in sequential order as listed in the document.

Type: Dictionary<string,PluginConfiguration>

Required: No

aws:applications

Install, repair, or uninstall applications on an EC2 instance. This plugin only runs on Microsoft Windows operating systems. For more information, see AWS Systems Manager Documents.

Syntax

Copy
"runtimeConfig":{ "aws:applications":{ "properties":[ { "id":"0.aws:applications", "action":"{{ action }}", "parameters":"{{ parameters }}", "source":"{{ source }}", "sourceHash":"{{ sourceHash }}" } ] }

Properties

action

The action to take.

Type: Enum

Valid values: Install | Repair | Uninstall

Required: Yes

parameters

The parameters for the installer.

Type: String

Required: No

source

The URL of the .msi file for the application.

Type: String

Required: Yes

sourceHash

The SHA256 hash of the .msi file.

Type: String

Required: No

aws:cloudWatch

Export data from Windows server to Amazon CloudWatch or Amazon CloudWatch Logs and monitor using Amazon CloudWatch metrics. This plugin only runs on Microsoft Windows operating systems. For more information about configuring CloudWatch integration with Amazon EC2, see Sending Logs, Events, and Performance Counters to Amazon CloudWatch. For more information about documents, see AWS Systems Manager Documents.

You can export and monitor the following data types:

ApplicationEventLog

Sends application event log data to CloudWatch Logs.

CustomLogs

Sends any text-based log file to CloudWatch Logs. The CloudWatch plugin creates a fingerprint for log files. The system then associates a data offset with each fingerprint. The plugin uploads files when there are changes, records the offset, and associates the offset with a fingerprint. This method is used to avoid a situation where a user enables the plugin, associates the service with a directory that contains a large number of files, and the system uploads all of the files.

Warning

Be aware that if your application truncates or attempts to clean logs during polling, any logs specified for LogDirectoryPath can lose entries. If, for example, you want to limit log file size, create a new log file when that limit is reached, and then continue writing data to the new file.

ETW

Sends Event Tracing for Windows (ETW) data to CloudWatch Logs. Microsoft Windows Server 2003 is not supported.

IIS

Sends IIS log data to CloudWatch Logs.

PerformanceCounter

Sends Windows performance counters to CloudWatch. You can select different categories to upload to CloudWatch as metrics. For each performance counter that you want to upload, create a PerformanceCounter section with a unique ID (for example, "PerformanceCounter2", "PerformanceCounter3", and so on) and configure its properties.

Note

If the SSM Agent or the CloudWatch plugin is stopped, performance counter data is not logged in CloudWatch This behavior is different than custom logs or Windows Event logs. Custom logs and Windows Event logs preserve performance counter data and upload it to CloudWatch after the SSM Agent or the CloudWatch plugin is available.

SecurityEventLog

Sends security event log data to CloudWatch Logs.

SystemEventLog

Sends system event log data to CloudWatch Logs.

You can define the following destinations for the data:

CloudWatch

The destination where your performance counter metric data is sent. You can add additional sections with unique IDs (for example, "CloudWatch2", CloudWatch3", and so on), and specify a different region for each new ID to send the same data to different locations.

CloudWatchLogs

The destination where your log data is sent. You can add additional sections with unique IDs (for example, "CloudWatchLogs2", CloudWatchLogs3", and so on), and specify a different region for each new ID to send the same data to different locations.

Syntax

Copy
"runtimeConfig":{ "aws:cloudWatch":{ "settings":{ "startType":"{{ status }}" }, "properties":"{{ properties }}" } }

Settings and Properties

AccessKey

Your access key ID. This property is required unless you launched your instance using an IAM role. This property cannot be used with SSM.

Type: String

Required: No

CategoryName

The performance counter category from Performance Monitor.

Type: String

Required: Yes

CounterName

The name of the performance counter from Performance Monitor.

Type: String

Required: Yes

CultureName

The locale where the timestamp is logged. If CultureName is blank, it defaults to the same locale currently used by your Windows instance.

Type: String

Valid values: For a list of supported values, see National Language Support (NLS) on the Microsoft website. Note that the div, div-MV, hu, and hu-HU values are not supported.

Required: No

DimensionName

A dimension for your Amazon CloudWatch metric. If you specify DimensionName, you must specify DimensionValue. These parameters provide another view when listing metrics. You can also use the same dimension for multiple metrics so that you can view all metrics belonging to a specific dimension.

Type: String

Required: No

DimensionValue

A dimension value for your Amazon CloudWatch metric.

Type: String

Required: No

Encoding

The file encoding to use (for example, UTF-8). Use the encoding name, not the display name.

Type: String

Valid values: For a list of supported values, see Encoding Class in the MSDN Library.

Required: Yes

Filter

The prefix of log names. Leave this parameter blank to monitor all files.

Type: String

Valid values: For a list of supported values, see the FileSystemWatcherFilter Property in the MSDN Library.

Required: No

Flows

Each data type to upload, along with the destination for the data (CloudWatch or CloudWatch Logs). For example, to send a performance counter defined under "Id": "PerformanceCounter" to the CloudWatch destination defined under "Id": "CloudWatch", enter "PerformanceCounter,CloudWatch". Similarly, to send the custom log, ETW log, and system log to the CloudWatch Logs destination defined under "Id": "ETW", enter "(ETW),CloudWatchLogs". In addition, you can send the same performance counter or log file to more than one destination. For example, to send the application log to two different destinations that you defined under "Id": "CloudWatchLogs" and "Id": "CloudWatchLogs2", enter "ApplicationEventLog,(CloudWatchLogs, CloudWatchLogs2)".

Type: String

Valid values (source): ApplicationEventLog | CustomLogs | ETW | PerformanceCounter | SystemEventLog | SecurityEventLog

Valid values (destination): CloudWatch | CloudWatchLogs | CloudWatchn | CloudWatchLogsn

Required: Yes

FullName

The full name of the component.

Type: String

Required: Yes

Id

Identifies the data source or destination. This identifier must be unique within the configuration file.

Type: String

Required: Yes

InstanceName

The name of the performance counter instance. Do not use an asterisk (*) to indicate all instances because each performance counter component only supports one metric. You can, however use _Total.

Type: String

Required: Yes

Levels

The types of messages to send to Amazon CloudWatch.

Type: String

Valid values:

  • 1 - Only error messages uploaded.

  • 2 - Only warning messages uploaded.

  • 4 - Only information messages uploaded.

Note that you can add values together to include more than one type of message. For example, 3 means that error messages (1) and warning messages (2) are included. A value of 7 means that error messages (1), warning messages (2), and informational messages (4) are included.

Required: Yes

Note

Windows Security Logs should set Levels to 7.

LineCount

The number of lines in the header to identify the log file. For example, IIS log files have virtually identical headers. You could enter 3, which would read the first three lines of the log file's header to identify it. In IIS log files, the third line is the date and time stamp, which is different between log files.

Type: Integer

Required: No

LogDirectoryPath

For CustomLogs, the path where logs are stored on your Amazon EC2 instance. For IIS logs, the folder where IIS logs are stored for an individual site (for example, C:\\inetpub\\logs\\LogFiles\\W3SVCn). For IIS logs, only W3C log format is supported. IIS, NCSA, and Custom formats are not supported.

Type: String

Required: Yes

LogGroup

The name for your log group. This name is displayed on the Log Groups screen in the CloudWatch console.

Type: String

Required: Yes

LogName

The name of the log file.

  1. To find the name of the log, in Event Viewer, in the navigation pane, click Applications and Services Logs.

  2. In the list of logs, right-click the log you want to upload (for example, Microsoft>Windows>Backup>Operational), and then click Create Custom View.

  3. In the Create Custom View dialog box, click the XML tab. The LogName is in the <Select Path=> tag (for example, Microsoft-Windows-Backup). Copy this text into the LogName parameter.

Type: String

Valid values: Application | Security | System | Microsoft-Windows-WinINet/Analytic

Required: Yes

LogStream

The destination log stream. If you use {instance_id}, the default, the instance ID of this instance is used as the log stream name.

Type: String

Valid values: {instance_id} | {hostname} | {ip_address} <log_stream_name>

If you enter a log stream name that doesn't already exist, CloudWatch Logs automatically creates it for you. You can use a literal string or predefined variables ({instance_id}, {hostname}, {ip_address}, or a combination of all three to define a log stream name.

The log stream name specified in this parameter appears on the Log Groups > Streams for <YourLogStream> screen in the CloudWatch console.

Required: Yes

MetricName

The CloudWatch metric that you want performance data to appear under.

Type: String

Required: Yes

NameSpace

The metric namespace where you want performance counter data to be written.

Type: String

Required: Yes

PollInterval

How many seconds must elapse before new performance counter and log data is uploaded.

Type: Integer

Valid values: Set this to 5 or more seconds. Fifteen seconds (00:00:15) is recommended.

Required: Yes

Region

The region where you want to send log data. Although you can send performance counters to a different region from where you send your log data, we recommend that you set this parameter to the same region where your instance is running.

Type: String

Valid values: us-east-1 | us-west-2 | eu-west-1 | eu-central-1 | ap-southeast-1 | ap-southeast-2 | ap-northeast-1

Required: Yes

SecretKey

Your secret access key. This property is required unless you launched your instance using an IAM role.

Type: String

Required: No

startType

Enable or disable CloudWatch on the instance.

Type: String

Valid values: Enabled | Disabled

Required: Yes

TimestampFormat

The timestamp format you want to use. For a list of supported values, see Custom Date and Time Format Strings in the MSDN Library.

Type: String

Required: Yes

TimeZoneKind

Provides time zone information when no time zone information is included in your log’s timestamp. If this parameter is left blank and if your timestamp doesn’t include time zone information, CloudWatch Logs defaults to the local time zone. This parameter is ignored if your timestamp already contains time zone information.

Type: String

Valid values: Local | UTC

Required: No

Unit

The appropriate unit of measure for the metric.

Type: String

Valid values: Seconds | Microseconds | Milliseconds | Bytes | Kilobytes | Megabytes | Gigabytes | Terabytes | Bits | Kilobits | Megabits | Gigabits | Terabits | Percent | Count | Bytes/Second | Kilobytes/Second | Megabytes/Second | Gigabytes/Second | Terabytes/Second | Bits/Second | Kilobits/Second | Megabits/Second | Gigabits/Second | Terabits/Second | Count/Second | None

Required: Yes

aws:configureDocker

(Schema version 2.0 or later) Configure an instance to work with containers and Docker. This plugin runs only on Microsoft Windows operating systems. For more information, see AWS Systems Manager Documents.

Syntax

Copy
"mainSteps": [ { "action": "aws:configureDocker", "name": "ConfigureDocker", "inputs": { "action": "{{ action }}" } } ]

Inputs

action

The type of action to perform.

Type: Enum

Valid values: Install | Uninstall

Required: Yes

aws:configurePackage

(Schema version 2.0 or later) Install or uninstall an AWS package. This plugin runs on Linux and Microsoft Windows operating systems. For more information, see AWS Systems Manager Documents.

Syntax

Copy
"mainSteps": [ { "action": "aws:configurePackage", "name": "configurePackage", "inputs": { "name": "{{ name }}", "action": "{{ action }}", "version": "{{ version }}" } } ]

Inputs

name

The name of the AWS package to install or uninstall.

Type: String

Required: Yes

action

Install or uninstall a package.

Type: Enum

Valid values: Install | Uninstall

Required: Yes

version

A specific version of the package to install or uninstall. If installing, the system installs the latest published version, by default. If uninstalling, the system uninstalls the currently installed version, by default. If no installed version is found, the latest published version is downloaded, and the uninstall action is run.

Type: String

Required: No

aws:domainJoin

Join an Amazon EC2 instance to a domain. This plugin only runs on Microsoft Windows operating systems. For more information, see AWS Systems Manager Documents.

Syntax

Copy
"runtimeConfig":{ "aws:domainJoin":{ "properties":{ "directoryId":"{{ directoryId }}", "directoryName":"{{ directoryName }}", "directoryOU":"{{ directoryOU }}", "dnsIpAddresses":"{{ dnsIpAddresses }}" } }

Properties

directoryId

The ID of the directory.

Type: String

Required: Yes

Example: "directoryId": "d-1234567890"

directoryName

The name of the domain.

Type: String

Required: Yes

Example: "directoryName": "example.com"

directoryOU

The organizational unit (OU).

Type: String

Required: No

Example: "directoryOU": "OU=test,DC=example,DC=com"

dnsIpAddresses

The IP addresses of the DNS servers.

Type: Array

Required: No

Example: "dnsIpAddresses": ["198.51.100.1","198.51.100.2"]

Examples

For examples, see Joining a Windows Instance to an AWS Directory Service Domain in the Amazon EC2 User Guide for Windows Instances.

aws:downloadContent

(Schema version 2.0 or later) Download SSM documents and scripts from remote locations. This plugin is supported on Linux and Windows operating systems.

Syntax

Copy
"mainSteps": [ { "action":"aws:downloadContent", "name":"downloadContent", "inputs":{ "sourceType":"{{ sourceType }}", "sourceInfo":"{{ sourceInfo }}", "destinationPath":"{{ destinationPath }}" } }

Inputs

sourceType

The download source. Systems Manager currently supports the following source types for downloading scripts and SSM documents: GitHub, S3, and SSMDocument.

Type: String

Required: Yes

sourceInfo

The information required to retrieve the content from the required source.

Type: StringMap

Required: Yes

For sourceType GitHub, specify the following:

  • owner: The repository owner.

  • repository: The name of the repository.

  • path: The path to the file or directory you want to download.

  • getOptions: Extra options to retrieve content from a different branch or a different commit. This parameter uses the following format:

    • branch:branch_name

      The default is master.

    • commitID:commitID

      The default is head.

  • tokenInfo: The Systems Manager parameter (a SecureString parameter) where you store your access token information.

Copy
Example syntax: { "owner":"TestUser", "repository":"GitHubTest", "path": "scripts/python/test-script", "getOptions" : "branch:master", "tokenInfo":"{{ssm-secure:secure-string-token}}" }

For sourceType S3, specify the following:

  • path: The URL to the file or directory you want to download from Amazon S3.

Copy
Example syntax: { "path": "https://s3.amazonaws.com/aws-executecommand-test/powershell/helloPowershell.ps1" }

For sourceType SSMDocument, specify one of the following:

  • name: The name and version of the document in the following format: name:version. Version is optional.

    Copy
    Example syntax: { "name": "Example-RunPowerShellScript:3" }
  • name: The ARN for the document in the following format: arn:aws:ssm:region:instance_id:document/document_name

    Copy
    { "name":"arn:aws:ssm:us-east-1:i-1234567890:document/MySharedDoc" }

aws:psModule

Install PowerShell modules on an EC2 instance. This plugin only runs on Microsoft Windows operating systems. For more information, see AWS Systems Manager Documents.

Syntax

Copy
"runtimeConfig":{ "aws:psModule":{ "properties":[ { "id":"0.aws:psModule", "runCommand":"{{ commands }}", "source":"{{ source }}", "sourceHash":"{{ sourceHash }}", "workingDirectory":"{{ workingDirectory }}", "timeoutSeconds":"{{ executionTimeout }}" } ]

Properties

runCommand

The PowerShell command to run after the module is installed.

Type: String or Array

Required: No

source

The URL or local path on the instance to the application .zip file.

Type: String

Required: No

sourceHash

The SHA256 hash of the .zip file.

Type: String

Required: No

timeoutSeconds

The time in seconds for a command to be completed before it is considered to have failed.

Type: String

Required: No

workingDirectory

The path to the working directory on your instance.

Type: String

Required: No

aws:refreshAssociation

(Schema version 2.0 or later) Refresh (force apply) an association on demand. This action will change the system state based on what is defined in the selected association or all associations bound to the targets. This plugin runs on Linux and Microsoft Windows operating systems. For more information, see AWS Systems Manager Documents.

Syntax

Copy
"action":"aws:refreshAssociation", "name":"refreshAssociation", "inputs": { "associationIds": "{{ associationIds }}" }

Inputs

associationIds

List of association IDs. If empty, all associations bound to the specified target are applied.

Type: StringList

Required: No

aws:runDockerAction

(Schema version 2.0 or later) Run Docker actions on containers. This plugin runs on Linux and Microsoft Windows operating systems. For more information, see AWS Systems Manager Documents.

Syntax

Copy
"mainSteps": [ { "action": "aws:runDockerAction", "name": "RunDockerAction", "inputs": { "action": "{{ action }}", "container": "{{ container }}", "image": "{{ image }}", "memory": "{{ memory }}", "cpuShares": "{{ cpuShares }}", "volume": "{{ volume }}", "cmd": "{{ cmd }}", "env": "{{ env }}", "user": "{{ user }}", "publish": "{{ publish }}" }

Inputs

action

The type of action to perform.

Type: String

Required: Yes

container

The Docker container ID.

Type: String

Required: No

image

The Docker image name.

Type: String

Required: No

cmd

The container command.

Type: String

Required: No

memory

The container memory limit.

Type: String

Required: No

cpuShares

The container CPU shares (relative weight).

Type: String

Required: No

volume

The container volume mounts.

Type: StringList

Required: No

env

The container environment variables.

Type: String

Required: No

user

The container user name.

Type: String

Required: No

publish

The container published ports.

Type: String

Required: No

aws:runDocument

(Schema version 2.0 or later) Executes SSM documents stored in Systems Manager or on a local share. You can use this plugin with the aws:downloadContent plugin to download an SSM document from a remote location to a local share, and then run it. This plugin is supported on Linux and Windows operating systems.

Syntax

Copy
"mainSteps": [ { "action":"aws:runDocument", "name":"runDocument", "inputs":{ "documentType":"{{ documentType }}", "documentPath":"{{ documentPath }}", "documentParameters":"{{ documentParameters }}" } }

Inputs

documentType

The document type to run. You can run local documents (LocalPath) or documents stored in Systems Manager (SSMDocument).

Type: String

Required: Yes

documentPath

The path to the document. If documentType is LocalPath, then specify the path to the document on the local share. If documentType is SSMDocument, then specify the name of the document.

Type: String

Required: No

documentParameters

Parameters for the document.

Type: StringMap

Required: No

aws:runPowerShellScript

Run PowerShell scripts or specify the path to a script to run. This plugin only runs on Microsoft Windows operating systems. For more information, see AWS Systems Manager Documents.

Syntax

Copy
"runtimeConfig":{ "aws:runPowerShellScript":{ "properties":[ { "id":"0.aws:runPowerShellScript", "runCommand":"{{ commands }}", "workingDirectory":"{{ workingDirectory }}", "timeoutSeconds":"{{ executionTimeout }}" } ]

Properties

runCommand

Specify the command(s) to run or the path to an existing script on the instance.

Type: String or Array

Required: Yes

timeoutSeconds

The time in seconds for a command to be completed before it is considered to have failed.

Type: String

Required: No

workingDirectory

The path to the working directory on your instance.

Type: String

Required: No

aws:runShellScript

Run Linux shell scripts or specify the path to a script to run. This plugin only runs on Linux operating systems. For more information, see AWS Systems Manager Documents.

Syntax

Copy
"runtimeConfig":{ "aws:runShellScript":{ "properties":[ { "id":"0.aws:runShellScript", "runCommand":"{{ commands }}", "workingDirectory":"{{ workingDirectory }}", "timeoutSeconds":"{{ executionTimeout }}" } ] }

Properties

runCommand

Specify the command(s) to run or the path to an existing script on the instance.

Type: String or Array

Required: Yes

timeoutSeconds

The time in seconds for a command to be completed before it is considered to have failed.

Type: String

Required: No

workingDirectory

The path to the working directory on your instance.

Type: String

Required: No

aws:softwareInventory

(Schema version 2.0 or later) Gather an inventory of applications, AWS components, network configuration, Windows Updates, and custom inventory from an instance. This plugin runs on Linux and Microsoft Windows operating systems. For more information, see AWS Systems Manager Documents.

Syntax

Copy
"mainSteps": [ { "action": "aws:softwareInventory", "name": "collectSoftwareInventoryItems", "inputs": { "applications": "{{ applications }}", "awsComponents": "{{ awsComponents }}", "networkConfig": "{{ networkConfig }}", "windowsUpdates": "{{ windowsUpdates }}", "customInventory": "{{ customInventory }}" } }

Inputs

applications

Collect data for installed applications.

Type: String

Required: No

awsComponents

Collect data for AWS components like amazon-ssm-agent.

Type: String

Required: No

networkConfig

Collect data for network configuration.

Type: String

Required: No

windowsUpdates

Collect data for all Windows updates.

Type: String

Required: No

customInventory

Collect data for custom inventory.

Type: String

Required: No

aws:updateAgent

Update the EC2Config service to the latest version or specify an older version. This plugin only runs on Microsoft Windows operating systems. For more information about the EC2Config service, see Configuring a Windows Instance Using the EC2Config Service. For more information about documents, see AWS Systems Manager Documents.

Syntax

Copy
"runtimeConfig": { "aws:updateAgent": { "properties": { "agentName": "Ec2Config", "source": "https://s3.Region.amazonaws.com/aws-ssm-Region/manifest.json", "allowDowngrade": "{{ allowDowngrade }}", "targetVersion": "{{ version }}" } } }

Properties

agentName

EC2Config. This is the name of the agent that runs the EC2Config service.

Type: String

Required: Yes

allowDowngrade

Allow the EC2Config service to be downgraded to an earlier version. If set to false, the service can be upgraded to newer versions only (default). If set to true, specify the earlier version.

Type: Boolean

Required: No

source

The location where Systems Manager copies the version of EC2Config to install. You can't change this location.

Type: String

Required: Yes

targetVersion

A specific version of the EC2Config service to install. If not specified, the service will be updated to the latest version.

Type: String

Required: No

aws:updateSSMAgent

Update the SSM Agent to the latest version or specify an older version. This plugin runs on Linux and Windows operating systems. For more information, see Installing and Configuring SSM Agent. For more information about documents, see AWS Systems Manager Documents.

Syntax

Copy
"runtimeConfig": { "aws:updateSsmAgent": { "properties": [ { "agentName": "amazon-ssm-agent", "source": "https://s3.Region.amazonaws.com/aws-ssm-Region/manifest.json", "allowDowngrade": "{{ allowDowngrade }}", "targetVersion": "{{ version }}" } ] } }

Properties

agentName

amazon-ssm-agent. This is the name of the Systems Manager agent that processes requests and executes commands on the instance.

Type: String

Required: Yes

allowDowngrade

Allow the SSM Agent to be downgraded to an earlier version. If set to false, the agent can be upgraded to newer versions only (default). If set to true, specify the earlier version.

Type: Boolean

Required: No

source

The location where Systems Manager copies the SSM Agent version to install. You can't change this location.

Type: String

Required: Yes

targetVersion

A specific version of the SSM Agent to install. If not specified, the agent will be updated to the latest version.

Type: String

Required: No