Rule: EC2 Instances Managed by AWS Systems Manager

Rule Description:

Troubleshooting Steps (if applicable):

2. 1.

   Check IAM Roles: Ensure that the IAM roles associated with the EC2 instances have the necessary permissions to interact with AWS Systems Manager. Confirm that the roles have the appropriate policies attached for SSM access.

4. 2.

   Verify Agent Installation: Validate that the Systems Manager agent is installed and running on the EC2 instances. If it is not installed or not running correctly, follow the AWS Systems Manager installation guide to troubleshoot and reinstall the agent.

6. 3.

   Network Configuration: Ensure that the necessary network configurations are in place to allow communication between EC2 instances and AWS Systems Manager. Review security groups and network ACLs to verify that the required ports (e.g., port 443) are open and accessible.

Necessary Codes (if applicable):

2. 1.
   Launch EC2 instances with Systems Manager Integration:

aws ec2 run-instances \
    --image-id <AMI-ID> \
    --instance-type <INSTANCE-TYPE> \
    --key-name <KEY-NAME> \
    --subnet-id <SUBNET-ID> \
    --iam-instance-profile Name=<IAM-ROLE-WITH-SSM-PERMISSIONS> \
    --user-data '{
        "aws:runCommand": {
            "Comment": "Configure EC2 instances for AWS Systems Manager",
            "DocumentName": "AWS-ConfigureAWSPackage",
            "Parameters": {
                "commands": ["aws:domainJoin", "example-command"]
            }
        }
    }'

2. 1.
   Configure existing EC2 instances for Systems Manager Management:

aws ssm create-association \
    --name "AWS-ConfigureAWSPackage" \
    --parameters '{
        "commands": ["aws:domainJoin", "example-command"]
    }' \
    --targets '{
        "Key": "InstanceIds",
        "Values": [
            "<INSTANCE-ID-1>",
            "<INSTANCE-ID-2>"
        ]
    }'

Step-by-Step Remediation Guide:

2. 1.

   Launch New EC2 Instances:

   • Select an appropriate AMI with the necessary operating system and software configurations.
   • Choose the desired instance type based on your requirements.
   • Specify the appropriate key pair or create a new one for instance access.
   • Select the appropriate subnet within your VPC.
   • Attach an IAM role to the instance that has the necessary policies allowing Systems Manager access.
   • Use the provided necessary codes for launching the instances with Systems Manager integration.
4. 2.

   Configure Existing EC2 Instances:

   • Identify the existing EC2 instances that need to be managed by AWS Systems Manager.
   • Ensure the instances have the Systems Manager agent installed and running.
   • Associate the instances with the desired IAM role that has necessary Systems Manager permissions.
   • Use the provided necessary codes for configuring the existing instances for Systems Manager management.
6. 3.

   Verify Systems Manager Management:

   • Open the AWS Systems Manager console.
   • Navigate to the "Managed Instances" section.
   • Ensure that the EC2 instances appear under the "Managed Instances" list and show an "Online" status.
   • Test various Systems Manager features such as running commands, managing patches, or scheduling maintenance tasks to confirm functionality.