- Newest
- Most votes
- Most comments
It should be possible to do this by creating a custom document containing a step to run a PowerShell script that changes the password and copies it off the Windows host. Then you could have a step that stores it in an S3 bucket for later use. The runbook can be configured to run on a schedule using Change Calendar. https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-change-calendar.html https://docs.aws.amazon.com/systems-manager/latest/userguide/automation-action-executeAwsApi.html (For putting an object in an S3 bucket) https://docs.aws.amazon.com/systems-manager/latest/userguide/automation-action-runcommand.html (or running a custom shell/powershell script)
I would recommend also consulting with the EC2 Windows team about this and ensuring there are no security concerns in this process
Relevant content
- AWS OFFICIALUpdated a year ago
- AWS OFFICIALUpdated 2 months ago
- AWS OFFICIALUpdated a year ago
- AWS OFFICIALUpdated 2 years ago