steampipe plugin install awssteampipe plugin install aws

Table: aws_ssm_document

AWS Systems Manager Document defines the actions that SSM performs on managed instances. SSM provides more than 100 pre-configured documents that used by specifying parameters at runtime.

Examples

Basic info

select
  name,
  document_version,
  status,
  owner,
  document_format,
  document_type,
  platform_types,
  region
from
  aws_ssm_document;

List documents owned by the AWS account

select
  name,
  owner,
  document_version,
  status,
  document_format,
  document_type
from
  aws_ssm_document
where
  owner_type = 'Self';

List documents not owned by Amazon

select
  name,
  owner,
  document_version,
  status,
  document_format,
  document_type
from
  aws_ssm_document
where
  owner_type != 'Amazon';

List documents that are shared publicly

select
  name,
  owner,
  account_ids
from
  aws_ssm_document
where
  owner_type = 'Self'
  and account_ids :: jsonb ? 'all';

Get a specific document

select
  name,
  arn,
  approved_version,
  created_date,
  document_type
from
  aws_ssm_document
where
  arn = 'arn:aws:ssm:ap-south-1:112233445566:document/AWS-ASGEnterStandby';

.inspect aws_ssm_document

AWS SSM Document

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The AWS Account ID in which the resource is located.
account_ids	jsonb	[DEPRECATED] The account IDs that have permission to use this document.The ID can be either an AWS account or All.
account_sharing_info_list	jsonb	[DEPRECATED] A list of AWS accounts where the current document is shared and the version shared with each account.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
approved_version	text	The version of the document currently approved for use in the organization.
arn	text	The Amazon Resource Name (ARN) of the document.
attachments_information	jsonb	Details about the document attachments, including names, locations, sizes,and so on.
author	text	The user in your organization who created the document.
created_date	timestamp with time zone	The date when the document was created.
default_version	text	The default version.
description	text	A description of the document.
document_format	text	The document format, either JSON or YAML.
document_type	text	The type of document.
document_version	text	The document version.
hash	text	The Sha256 or Sha1 hash created by the system when the document was created.
hash_type	text	The hash type of the document.
latest_version	text	The latest version of the document.
name	text	The name of the Systems Manager document.
owner	text	The AWS user account that created the document.
owner_type	text	The AWS user account type to filter the documents. Possible values: Self, Amazon, Public, Private, ThirdParty, All, Default.
parameters	jsonb	A description of the parameters for a document.
partition	text	The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
pending_review_version	text	The version of the document that is currently under review.
platform_types	jsonb	The operating system platform.
region	text	The AWS Region in which the resource is located.
requires	jsonb	A list of SSM documents required by a document.
review_information	jsonb	Details about the review of a document.
review_status	text	The current status of the review.
schema_version	text	The schema version.
sha1	text	The SHA1 hash of the document, which you can use for verification.
status	text	The user in your organization who created the document.
status_information	text	A message returned by AWS Systems Manager that explains the Status value.
tags	jsonb	A map of tags for the resource.
tags_src	jsonb	A list of tags associated with document
target_type	text	The target type which defines the kinds of resources the document can run on.
title	text	Title of the resource.
version_name	text	The version of the artifact associated with the document.

turbot/aws