将参数添加到SSM维护窗口任务

Question

我正在尝试通过在S3中执行脚本来使用SSM Run命令 - 我已经尝试对其进行编码，现在已经手动进行了所有作品。

我坚持将参数添加到SSM Manintenance窗口任务。

按照此示例 - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/docs/resources/ssm_maintance_window_task

这是下面的snippet。我正在添加3个参数，并计划/应用运行正常，但更改并未反映在控制台中！

 resource "aws_ssm_maintenance_window_task" "task" {
  max_concurrency = "2"
  max_errors      = "1"
  task_arn        = "AWS-RunRemoteScript"
  task_type       = "RUN_COMMAND"
  window_id       = aws_ssm_maintenance_window.taskuploadmaintenancewindow.id

  targets {
    key    = "WindowTargetIds"
    values = [aws_ssm_maintenance_window_target.taskuploadmaintenancewindowtarget.id]
  }

  task_invocation_parameters {
    run_command_parameters {
      parameter {
        name   = "SourceType"
        values = ["S3"]
      }
      parameter {
        name   = "SourceInfo"
        values = ["{\"path\":\"https://mybucket.s3.ap-northeast-1.amazonaws.com/myscript.sh\"}"]
      }
      parameter {
        name   = "commands"
        values = ["myscript.sh"]
      }
    }
  }

Answer 1

解决了。 “命令”需要作为命令

行，我的工作方式是返回SSM Run命令，构建新命令并滚动到底部并查看AWS CLI CONFIC的语法，它为您构建：

  aws ssm send-command --document-name "AWS-RunRemoteScript" --document-version "1" --targets '[{"Key":"tag:Name","Values":["deliberately removed"]}]' --parameters '{"sourceType":["S3"],"sourceInfo":["{\"path\":\"https://mybucket.s3.ap-northeast-1.amazonaws.com/myscript.sh\"}"],"commandLine":["myscript.sh"],"workingDirectory":[""],"executionTimeout":["3600"]}' --timeout-seconds 600 --max-concurrency "50" --max-errors "0" --region ap-northeast-1

因此，现在更改案例/命令行有效。我希望有一天对某人有帮助。

run_command_parameters {
      parameter {
        name   = "sourceType"
        values = ["S3"]
      }
      parameter {
        name   = "sourceInfo"
        values = ["{\"path\":\"https://mybucket.s3.ap-northeast-1.amazonaws.com/myscript.sh\"}"]
      }
      parameter {
        name   = "commandLine"
        values = ["myscript.sh"]

Answer 2

顺便说一句，我发现输入SourceInfo时没有处理可怕的格式，而是可以将其包装在Terraform的Jsonencode中。

  parameter {
    name = "sourceInfo"
    values = [jsonencode(
      {
        owner      = "ownername"
        path       = "pathdir"
        repository = "reponame"
        tokenInfo  = "sometoken"
      }
      )
    ]
  }