• AWS Systems Manager Change Manager is no longer open to new customers. Existing customers can continue to use the service as normal. For more information, see AWS Systems Manager Change Manager availability change.

• The AWS Systems Manager CloudWatch Dashboard will no longer be available after April 30, 2026. Customers can continue to use Amazon CloudWatch console to view, create, and manage their Amazon CloudWatch dashboards, just as they do today. For more information, see Amazon CloudWatch Dashboard documentation.

Setting up Session Manager

Before you use AWS Systems Manager Session Manager to connect to the managed nodes in your account, complete the steps in the following topics.

Topics

Step 1: Complete Session Manager prerequisites
Step 2: Verify or add instance permissions for Session Manager
Step 3: Control session access to managed nodes
Step 4: Configure session preferences
Step 5: (Optional) Restrict access to commands in a session
Step 6: (Optional) Use AWS PrivateLink to set up a VPC endpoint for Session Manager
Step 7: (Optional) Turn on or turn off ssm-user account administrative permissions
Step 8: (Optional) Allow and control permissions for SSH connections through Session Manager

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

Session Manager

Step 1: Complete Session Manager prerequisites