aws ssm

Systems Manager

high risk

interactive breakdown — edit the command and press Explain

$

⚠ Risks & cautions

--with-decryption prints secrets.
send-command can run arbitrary commands on many instances.

What it does

Parameters, sessions and remote commands.

Examples

aws ssm start-session --target i-123Shell without SSH · explain & risk-check →

aws ssm get-parameter --name /app/db --with-decryptionRead a secret · explain & risk-check →

Related

Open the full explainer →More in AWS, Azure & GCP CLIs

Reference text is hand-written and may be incomplete — check man aws for your version. Test destructive commands on a non-production system first.