steampipe plugin install awssteampipe plugin install aws

Table: aws_ssm_association

An association is a configuration that is assigned to your managed instances. The configuration defines the state that you want to maintain on your instances. For example, an association can specify that antivirus software must be installed and running on your instances, or that certain ports must be closed. The association specifies a schedule for when the configuration is applied once or reapplied at specified times.

Examples

Basic info

select
  association_id,
  association_name,
  arn,
  association_version,
  last_execution_date,
  document_name,
  compliance_severity,
  region
from
  aws_ssm_association;

List associations that have a failed status

select
  association_id,
  overview ->> 'AssociationStatusAggregatedCount' as association_status_aggregated_count,
  overview ->> 'DetailedStatus' as detailed_status,
  overview ->> 'Status' as status
from
  aws_ssm_association
where
  overview ->> 'Status' = 'Failed';

List instances targeted by the association

select
  association.association_id as association_id,
  target ->> 'Key' as target_key,
  target ->> 'Values' as target_value,
  instances
from
  aws_ssm_association as association,
  jsonb_array_elements(targets) as target,
  jsonb_array_elements_text(target -> 'Values') as instances
where
  target ->> 'Key' = 'InstanceIds';

List associations with a critical compliance severity level

select
  association_id,
  association_name,
  targets,
  document_name
from
  aws_ssm_association
where
  compliance_severity = 'CRITICAL';

.inspect aws_ssm_association

AWS SSM Association

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The AWS Account ID in which the resource is located.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
apply_only_at_cron_interval	boolean	By default, when you create a new associations, the system runs it immediately after it is created and then according to the schedule you specified. Specify this option if you don't want an association to run immediately after you create it. This parameter is not supported for rate expressions.
arn	text	The Amazon Resource Name (ARN) specifying the association.
association_id	text	The ID created by the system when you create an association.
association_name	text	The Name of association.
association_version	text	The association version.
automation_target_parameter_name	text	Specify the target for the association. This target is required for associations that use an Automation document and target resources by using rate controls.
compliance_severity	text	A cron expression that specifies a schedule when the association runs.
date	timestamp with time zone	The date when the association was made.
document_name	text	The name of the Systems Manager document.
document_version	text	The version of the document used in the association.
instance_id	text	The ID of the instance.
last_execution_date	timestamp with time zone	The date on which the association was last run.
last_successful_execution_date	timestamp with time zone	The last date on which the association was successfully run.
last_update_association_date	timestamp with time zone	The date when the association was last updated.
max_concurrency	text	The maximum number of targets allowed to run the association at the same time.
max_errors	text	The number of errors that are allowed before the system stops sending requests to run the association on additional targets.
output_location	jsonb	An S3 bucket where you want to store the output details of the request.
overview	jsonb	Information about the association.
parameters	jsonb	A description of the parameters for a document.
partition	text	The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
region	text	The AWS Region in which the resource is located.
schedule_expression	text	A cron expression that specifies a schedule when the association runs.
status	text	The status of the association. Status can be: Pending, Success, or Failed.
sync_compliance	text	The mode for generating association compliance. You can specify AUTO or MANUAL.
target_locations	jsonb	The combination of AWS Regions and AWS accounts where you want to run the association.
targets	jsonb	A cron expression that specifies a schedule when the association runs.
title	text	Title of the resource.

turbot/aws