使用 AWS Systems Manager 在多个 Windows EC2 实例中启动或停止服务

Question

我们在Organization下的不同账户下有多个EC2实例，我们需要在Windows中停止一个服务，请指导最简单的内置服务来执行这个活动

Answer 1

AWS Run command , which is part of System Manager can be used to execute PowerShell ( Start-Service | Stop-Service ) commands on the instances. You can target multiple instances in the same Org account via instance tags or Instance Ids. I dont know of a way to do this across multiple org accounts that could be described as "easiest" or with "built in" tools. But...

A fairly easy option is to invoke Run command via PowerShell locally/on a server (you need to install the AWS Powershell Tools on this machine).

Below command will attempt to:

• stop a service named NameOfMyService
• Only on instances with a tag called ROLE and with a value of WEBSERVER
• using credential named OrgAccountX (ie created with Set-AWSCredential command) you need one profile per account.

$runPSCommand = Send-SSMCommand `
    -ProfileName OrgAccountX
    -Target "Key=tag:ROLE,Values=WEBSERVER" `
    -DocumentName "AWS-RunPowerShellScript" `
    -Parameter @{'commands'=@('Stop-Service NameOfMyService')}

(adapted from aws docs here )

You can easily loop through an array of Profile names like this:

$awsOrgProfiles = @('OrgAccount1', 'OrgAccount2', 'OrgAccountX');

$awsOrgProfiles | % {
   Send-SSMCommand -ProfileName $_ ...
}

( $_ will contain one the ProfileName, rest of the command is the same as above)