AWS::SSM::Association Target - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWS::SSM::Association Target

Target is a property of the AWS::SSM::Association resource that specifies the targets for an SSM document in Systems Manager. You can target all instances in an Amazon Web Services account by specifying the InstanceIds key with a value of *. To view a JSON and a YAML example that targets all instances, see the example "Create an association for all managed instances in an Amazon Web Services account" later in this page.


To declare this entity in your Amazon CloudFormation template, use the following syntax:


{ "Key" : String, "Values" : [ String, ... ] }


Key: String Values: - String



User-defined criteria for sending commands that target managed nodes that meet the criteria.

Required: Yes

Type: String

Pattern: ^[\p{L}\p{Z}\p{N}_.:/=+\-@]{1,128}$|resource-groups:Name

Update requires: No interruption


User-defined criteria that maps to Key. For example, if you specified tag:ServerRole, you could specify value:WebServer to run a command on instances that include EC2 tags of ServerRole,WebServer.

Depending on the type of target, the maximum number of values for a key might be lower than the global maximum of 50.

Required: Yes

Type: Array of String

Minimum: 0

Maximum: 50

Update requires: No interruption