AWS Systems Manager
User Guide

The AWS Documentation website is getting a new look!
Try it now and let us know what you think. Switch to the new look >>

You can return to the original look by selecting English in the language selector above.

Troubleshooting Session Manager

Use the following information to help you troubleshoot problems with Session Manager.

No Permission to Start a Session

Problem: You try to start a session, but the system tells you that you do not have the necessary permissions.

No Permission to Change Session Preferences

Problem: You try to update global session preferences for your organization, but the system tells you that you do not have the necessary permissions.

Instance Not Available or Not Configured for Session Manager

Problem 1: You want to start a session on the Start a session console page, but an instance is not in the list.

  • Solution: The instance you want to connect to might not have been configured to use with the AWS Systems Manager service. To use an instance with Systems Manager, an IAM instance profile that gives Systems Manager permission to perform actions on your instances must be attached to the instance. For information, see Create an IAM Instance Profile for Systems Manager.

    Note

    If SSM Agent is already running on an instance when you attach the IAM instance profile, you might need to restart the agent before the instance is listed on the Start a session console page.

Problem 2: An instance you want to connect is in the list on the Start a session console page, but the page reports that "The instance you selected is not configured to use Session Manager."

Session Manager Plugin Not Found

To use the AWS CLI to run session commands, the Session Manager plugin must also be installed on your local machine. For information, see (Optional) Install the Session Manager Plugin for the AWS CLI.

Session Manager Plugin Not Automatically Added to Command Line Path (Windows)

When you install the Session Manager plugin on Windows, the session-manager-plugin executable should be automatically added to your operating system's PATH environment variable. If the command failed after you ran it to check whether the Session Manager plugin installed correctly (aws ssm start-session --target instance-id), you might need to set it manually using the following procedure.

To modify your PATH variable (Windows)

  1. Press the Windows key and enter environment variables.

  2. Choose Edit environment variables for your account.

  3. Choose PATH and then choose Edit.

  4. Add paths to the Variable value field, separated by semicolons, as shown in this example: C:\existing\path;C:\new\path

    C:\existing\path represents the value already in the field. C:\new\path represents the path you want to add, as shown in these examples.

    • 64-bit machines: C:\Program Files\Amazon\SessionManagerPlugin\bin\

    • 32-bit machines: C:\Program Files (x86)\Amazon\SessionManagerPlugin\bin\

  5. Choose OK twice to apply the new settings.

  6. Close any running command prompts and re-open.