aws / aws/amazon-ssm-agent

Where do Hybrid mode registration saves credentials at for windows host?

Open
#566 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
1.2k
Forks
357
PR merge metrics
No merged PRs in 30d

Description

I'm launching hybrid SSM instances (for EC2 instances) and I tried to use the SSM instance role attached to do some addtional stuff like putting stuff to parameter store. According to the doc: https://docs.aws.amazon.com/systems-manager/latest/userguide/ssm-agent-technical-details.html, Linux SSM agent store credentials at /root/.aws/credentials. I could verify they exist. However, I was not able to find any credentials for windows host. The `C:\Program Files\Amazon\SSM\credentials` is empty and `C:\Users\Administrator\.aws\credentials\` also has no stuff (I created this prior to SSM installation to verify if they write stuff to the file).
I could verify the SSM instance role is being used while running `.\ssm-cli.exe get-diagnostics --output table`
```
AWS Credentials │ Success │ Credentials are for │
│ │ │ arn:aws:sts::xxxxxx
```
Do we have a way to obtain that credentials or use that role directly?

Thanks

Contributor guide

Open the contributing guide

Research direction

Start with the linked SSM Agent technical-details documentation, the Windows paths C:\Program Files\Amazon\SSM\credentials and C:\Users\Administrator\.aws\credentials, and the ssm-cli.exe get-diagnostics command. Determine whether Windows hybrid registration exposes credentials or supports direct use of the instance role, then document the confirmed behavior and supported usage.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, go
Domain
cloud, operating-systems
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.