EC2Config version history - Amazon Elastic Compute Cloud
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

EC2Config version history

Windows AMIs prior to Windows Server 2016 include an optional service called the EC2Config service (EC2Config.exe). EC2Config starts when the instance boots and performs tasks during startup and each time you stop or start the instance. For information about the EC2Config versions included in the Windows AMIs, see Amazon Windows AMIs.

You can receive notifications when new versions of the EC2Config service are released. For more information, see Subscribe to EC2Config service notifications.

The following table describes the released versions of EC2Config. For information about the updates for SSM Agent, see Systems Manager SSM Agent Release Notes.

Version Details Release date
  • Limit domain name devolution based on registry entry: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dnscache\Parameters\DomainNameDevolutionLevel.

  • New version of SSM Agent 3.2.1630.0.

4 October 2023
  • Added retry capability for discovering console port.

  • New version of SSM Agent 3.1.2282.0.

1 August 2023
  • Updated AWS Core SDK to version

  • Fixed issue where the AWS-UpdateEC2Config SSM document fails to update EC2Config on instances enabled with only IMDSv2.

  • New version of SSM Agent 3.1.2144.0.

8 March 2023
  • New version of SSM Agent 3.1.1927.0.

14 February 2023
  • Fixed issue where ephemeral volumes are incorrectly identified on r5d and i4i instance families.

  • New version of SSM Agent 3.1.1856.0.

5 December 2022
  • Updated to use PCI segment information to select the console port.

  • Signed PowerShell scripts and added copyright headers.

  • Fixed primary network adapter selection logic.

  • New version of SSM Agent 3.1.1732.0.

16 November 2022
  • Updated IMDS wait logic to make only IMDSv2 requests.

  • Added libec2launch.dll launch-agent shared library.

  • New version of SSM Agent 3.1.1188.0.

31 May 2022
  • Added wait logic to ensure full initialization of NIC before use.

  • New version of Log4Net picks up security patch.

  • New version of SSM Agent 3.1.1045.0 picks up security patch.

1 March 2022
  • Fixed issue where userdata crashes when the Temp folder is missing.

  • New version of SSM Agent 3.1.804.0.

31 January 2022
  • Fixed issue to correctly compute diskpart script path.

  • New version of SSM Agent 3.1.338.0.

6 October 2021
  • Updated Install-EgpuManagerConfig with IMDS v2 support.

  • Updated web links to use https.

  • New version of SSM Agent

7 September 2021
  • Fixed IMDS version 1 fallback logic

  • Updated all usage of Windows temp directory to EC2Config temp directory

  • New version of SSM Agent 3.0.1124.0

2 June 2021
  • Added support for SSM document schema version 2.2 in EC2ConfigUpdater

  • Added Amazon Nitro Enclaves package version to console log

  • New version of SSM Agent 3.0.529.0

4 May 2021
  • Removed all links in the settings UI

  • This is the last EC2Config version that supports Windows Server 2008.

3 March 2021
  • Fixed security issue related to Ec2ConfigMonitor scheduled task

  • Fixed drive letter mapping issue and incorrect ephemeral disk count

  • Added OsCurrentBuild and OsReleaseId to console output

  • New version of SSM Agent 2.3.871.0

11 December 2020
  • Fixed IMDS version 1 fallback logic

  • New version of SSM Agent 2.3.842.0

7 April 2020
  • Added support for IMDS v2

  • New version of SSM Agent 2.3.814.0

4 March 2020
  • Fixed issue detecting COM port for Windows Server 2008 R2 on metal instances

  • New version of SSM Agent 2.3.722.0

31 October 2019
  • New version of SSM Agent 2.3.634.0

18 June 2019
  • New version of SSM Agent 2.3.542.0

25 April 2019
  • New version of SSM Agent 2.3.444.0

11 February 2019
  • Added plugin for setting the monitor to never turn off to fix ACPI issues

  • SQL Server edition and version written to console

  • New version of SSM Agent 2.3.415.0

22 January 2019
  • Drive Letter Mapping description updated to better align to functionality

  • New version of SSM Agent 2.3.372.0

10 January 2019
  • Increased wait time for primary NIC

  • Added default configuration for RSS and Receive Queue settings for ENA devices

  • Disabled hibernation during Sysprep

  • New version of SSM Agent 2.3.344.0

  • Upgraded Amazon SDK to

15 December 2018
  • Improvements made to instance hibernation

  • New version of SSM Agent

8 November 2018
  • Added route for DNS server

  • New version of SSM Agent

24 October 2018
  • Added signing for all EC2Config related binaries

  • New version of SSM Agent

11 October 2018

New version of SSM Agent (

2 October 2018

New version of SSM Agent (

18 September 2018
  • New version of SSM Agent (

  • Added route to AMZN time service

  • Added route to GRID license service

  • Fixed an issue causing EBS NVMe volumes to be marked as ephemeral

17 September 2018

New version of SSM Agent (

17 August 2018

New version of SSM Agent (2.2.916.0)

7 August 2018

New version of SSM Agent (2.2.902.0)

31 July 2018

New version of SSM Agent (2.2.800.0)

27 June 2018

New version of SSM Agent (2.2.607.0)

25 May 2018

New version of SSM Agent (2.2.546.0)

11 May 2018

New version of SSM Agent (2.2.493.0)

26 April 2018

New version of SSM Agent (2.2.392.0)

28 March 2018
  • New version of SSM Agent (2.2.355.0)

  • Fixed an issue on M5 and C5 instances (unable to find PV drivers)

  • Add console logging for instance type, newest PV drivers, and NVMe drivers

13 March 2018

New version of SSM Agent (2.2.325.0)

8 March 2018

New version of SSM Agent (

15 February 2018

New version of SSM Agent (

6 February 2018

New version of SSM Agent (

16 January 2018
  • New version of SSM Agent (

  • Added COM port discovery on Amazon EC2 bare metal instances

  • Added Hyper-V status logging on Amazon EC2 bare metal instances

2 January 2018

New version of SSM Agent (

4 December 2017

New version of SSM Agent (

15 November 2017

New version of SSM Agent (

11 November 2017

New version of SSM Agent (

29 October 2017

New version of SSM Agent (

23 October 2017

New version of SSM Agent (

19 October 2017

New version of SSM Agent (

10 October 2017
  • New version of SSM Agent (

  • Added the Elastic GPU plugin for GPU instances

5 October 2017

New version of SSM Agent (

1 October 2017

New version of SSM Agent (


New version of SSM Agent (


New version of SSM Agent (2.0.952.0)


New version of SSM Agent (2.0.922.0)


New version of SSM Agent (2.0.913.0)


New version of SSM Agent (2.0.902.0)

  • New version of SSM Agent (2.0.879.0)

  • Fixed the CloudWatch Logs directory path for Windows Server 2003

  • New version of SSM Agent (2.0.847.0)

  • Fixed the issue with important.txt being generated in EBS volumes.

4.9.1964 New version of SSM Agent (2.0.842.0)
  • New version of SSM Agent (2.0.834.0)

  • Fixed the issue with drive letter not being mapped from Z: for ephemeral drives.

  • New version of SSM Agent (2.0.822.0)

  • [Bug] This version is not a valid update target from SSM Agent v4.9.1775.

4.9.1900 New version of SSM Agent (2.0.805.0)
  • New version of SSM Agent (2.0.796.0)

  • Fixed an issue with output/error redirection for admin userdata execution.

  • New version of SSM Agent (2.0.790.0)

  • Fixed problems with attaching multiple EBS volumes to an Amazon EC2 instance.

  • Improved CloudWatch to take a configuration path, keeping the backwards compatibility.

4.9.1791 New version of SSM Agent (2.0.767.0)


New version of SSM Agent (2.0.761.0)


New version of SSM Agent (2.0.755.0)


New version of SSM Agent (2.0.730.0)


New version of SSM Agent (2.0.716.0)


New version of SSM Agent (2.0.682.0)


  • New version of SSM Agent (2.0.672.0)

  • Fixed agent update issue with v4.3, v4.4, and v4.5


New version of SSM Agent (2.0.645.1)


New version of SSM Agent (2.0.633.0)


New version of SSM Agent (2.0.617.1)


New version of SSM Agent (2.0.599.0)


New version of SSM Agent (2.0.558.0)


  • Run Command, State Manager, the CloudWatch agent, and domain join support have been moved into another agent called SSM Agent. SSM Agent will be installed as part of the EC2Config upgrade. For more information, see EC2Config and Amazon Systems Manager.

  • If you have a proxy set up in EC2Config, you will need to update your proxy settings for SSM Agent before upgrading. If you do not update the proxy settings, you will not be able to use Run Command to manage your instances. To avoid this, see the following information before updating to the newer version: Installing and Configuring SSM Agent on Windows Instances in the Amazon Systems Manager User Guide.

  • If you previously enabled CloudWatch integration on your instances by using a local configuration file (AWS.EC2.Windows.CloudWatch.json), you will need to configure the file to work with SSM Agent.


  • Re-enabled activation plugin for instances with old Amazon KMS configuration. Skip activation for BYOL users.

  • Change default TRIM behavior to be disabled during disk format operation and added FormatWithTRIM for overriding InitializeDisks plugin with userdata.


  • Fix to reliably add routes to the primary network adapter.

  • Updates to improve support for Amazon services.

  • Fixes duplicate system logs appearing when filters set to same category.

  • Fixes to prevent from hanging during disk initialization.


Added support to log "Window is Ready to use" event to Windows Event Log on start.


Fix to allow uploading Systems Manager Run Command output to S3 bucket names with '.' character.


Added support to override InitializeDisks plugin settings. For example: To speed up SSD disk initialize, you can temporarily disable TRIM by specifying this in userdata:



Systems Manager Run Command - Fixes to process commands reliably after windows reboot.


  • Fix to gracefully handle reboot when running commands/scripts.

  • Fix to reliably cancel running commands.

  • Add support for (optionally) uploading MSI logs to S3 when installing applications via Systems Manager Run Command.


  • Fixes to enable RDP thumbprint generation for Windows Server 2003.

  • Fixes to include timezone and UTC offset in the EC2Config log lines.

  • Systems Manager support to run Run Command commands in parallel.

  • Roll back previous change to bring partitioned disks online.


  • Fix Systems Manager configuration failures when installing MSI applications.

  • Fix to reliably bring storage disks online.

  • Updates to improve support for Amazon services.


  • Fix in post Sysprep script to leave the configuration of windows update in a default state.

  • Fix the password generation plugin to improve the reliability in getting GPO password policy settings.

  • Restrict EC2Config/SSM log folder permissions to the local Administrators group.

  • Updates to improve support for Amazon services.


  • Fixed an issue with CloudWatch that prevented logs from getting uploaded when not on primary drive.

  • Improved the disk initialization process by adding retry logic.

  • Added improved error handling when the SetPassword plugin occasionally failed during AMI creation.

  • Updates to improve support for Amazon services.


  • Improvements to the ec2config-cli utility for config testing and troubleshooting within instance.

  • Avoid adding static routes for Amazon KMS and meta-data service on an OpenVPN adapter.

  • Fixed an issue where user-data execution was not honoring the "persist" tag.

  • Improved error handling when logging to the EC2 console is not available.

  • Updates to improve support for Amazon services.


  • Windows activation reliability fix to first use link local address for activating windows via Amazon KMS

  • Improved proxy handling for Systems Manager, Windows Activation and Domain Join scenarios

  • Fixed an issue where duplicate lines of user accounts were added to the Sysprep answer file


  • Addressed a scenario where the CloudWatch plugin may consume excessive CPU and memory reading Windows Event Logs

  • Added a link to the CloudWatch configuration documentation in the EC2Config Settings UI


  • Fixes to EC2Config when used in combination with VM-Import.

  • Fixed service naming issue in the WiX installer.


  • Improved exception handling for Systems Manager and domain join failures.

  • Change to support Systems Manager SSM schema versioning.

  • Fixed formatting ephemeral disks on Win2K3.

  • Change to support configuring disk size greater than 2TB.

  • Reduced virtual memory usage by setting GC mode to default.

  • Support for downloading artifacts from UNC path in aws:psModule and aws:application plugin.

  • Improved logging for Windows activation plugin.


  • Performance improvements by delay loading Systems Manager SSM assemblies.

  • Improved exception handling for malformed sysprep2008.xml.

  • Command line support for Systems Manager "Apply" configuration.

  • Change to support domain join when there is a pending computer rename.

  • Support for optional parameters in the aws:applications plugin.

  • Support for command array in aws:psModule plugin.


  • Enable support for Systems Manager.

  • Automatically domain join EC2 Windows instances to an Amazon directory via Systems Manager.

  • Configure and upload CloudWatch logs/metrics via Systems Manager.

  • Install PowerShell modules via Systems Manager.

  • Install MSI applications via Systems Manager.


  • Added scheduled task to recover EC2Config from service startup failures.

  • Improvements to the Console log error messages.

  • Updates to improve support for Amazon services.


  • Fixed an issue with large memory consumption in some cases when the CloudWatch Logs feature is enabled.

  • Fixed an upgrade bug so that ec2config versions lower than 2.1.19 can now upgrade to latest.

  • Updated COM port opening exception to be more friendly and useful in logs.

  • Ec2configServiceSettings UI disabled resizing and fixed the attribution and version display placement in UI.


  • Handled NullPointerException while querying a registry key for determining Windows Sysprep state which returned null occasionally.

  • Freed up unmanaged resources in finally block.


Fixed a issue in CloudWatch plugin for handling empty log lines.


  • Removed configuring CloudWatch Logs settings through UI.

  • Enable users to define CloudWatch Logs settings in %ProgramFiles%\Amazon\Ec2ConfigService\Settings\AWS.EC2.Windows.CloudWatch.json file to allow future enhancements.


Fixed unhandled exception and added logging.


  • Fixes Windows OS version check in EC2Config Installer to support Windows Server 2003 SP1 and later.

  • Fixes null value handling when reading registry keys related to updating Sysprep config files.


  • Added support for EC2Config to run during Sysprep execution for Windows 2008 and greater.

  • Improved exception handling and logging for better diagnostics


  • Reduced the load on the instance and on CloudWatch Logs when uploading log events.

  • Addressed an upgrade issue where the CloudWatch Logs plug-in did not always stay enabled


  • Added support to upload logs to CloudWatch Log Service.

  • Fixed a race condition issue in Ec2OutputRDPCert plug-in

  • Changed EC2Config Service recovery option to Restart from TakeNoAction

  • Added more exception information when EC2Config Crashes


  • Fixed a typo in PostSysprep.cmd

  • Fixed the bug which EC2Config does not pin itself onto start menu for OS2012+


  • Added option to install EC2Config without service starting immediately upon install. To use, run 'Ec2Install.exe start=false' from the command prompt

  • Added parameter in wallpaper plugin to control adding/removing wallpaper. To use, run 'Ec2WallpaperInfo.exe set' or 'Ec2WallpaperInfo.exe revert' from the command prompt

  • Added checking for RealTimeIsUniversal key, output incorrect settings of the RealTimeIsUniveral registry key to the Console

  • Removed EC2Config dependency on Windows temp folder

  • Removed UserData execution dependency on .Net 3.5


  • Added check to service stop behavior to check that resources are being released

  • Fixed issue with long execution times when joined to domain


  • Updated Installer to allow upgrades from older versions

  • Fixed Ec2WallpaperInfo bug in .Net4.5 only environment

  • Fixed intermittent driver detection bug

  • Added silent install option. Execute Ec2Install.exe with the '-q' option. eg: 'Ec2Install.exe -q'


  • Added support for .Net4 and .Net4.5 only environments

  • Updated Installer


  • Added ephemeral disk labeling support when using Intel network driver (eg. C3 instance Type). For more information, see Enhanced networking on Windows.

  • Added AMI Origin Version and AMI Origin Name support to the console output

  • Made changes to the Console Output for consistent formatting/parsing

  • Updated Help File


  • Added EC2Config WMI Object for Completion notification (-Namespace root\Amazon -Class EC2_ConfigService)

  • Improved Performance of Startup WMI query with large Event Logs; could cause prolonged high CPU during initial execution


  • Fixed UserData execution issue with Standard Output and Standard Error buffer filling

  • Fixed incorrect RDP thumbprint sometimes appearing in Console Output for >= w2k8 OS

  • Console Output now contains 'RDPCERTIFICATE-SubjectName:' for Windows 2008+, which contains the machine name value

  • Added D:\ to Drive Letter Mapping dropdown

  • Moved Help button to top right and changed look/feel

  • Added Feedback survey link to top right


  • General Tab includes link to EC2Config download page for new Versions

  • Desktop Wallpaper overlay now stored in Users Local Appdata folder instead of My Documents to support MyDoc redirection

  • MSSQLServer name sync'd with system in Post-Sysprep script (2008+)

  • Reordered Application Folder (moved files to Plugin directory and removed duplicate files)

  • Changed System Log Output (Console):

  • *Moved to a date, name, value format for easier parsing (Please start migrating dependencies to new format)

  • *Added 'Ec2SetPassword' plugin status

  • *Added Sysprep Start and End times

  • Fixed issue of Ephemeral Disks not being labeled as 'Temporary Storage' for non-english Operating Systems

  • Fixed EC2Config Uninstall failure after running Sysprep


  • Optimized requests to the Metadata service

  • Metadata now bypass Proxy Settings

  • Ephemeral Disks labeled as 'Temporary Storage' and Important.txt placed on volume when found (Citrix PV drivers only). For more information, see Upgrade PV drivers on Windows instances.

  • Ephemeral Disks assigned drive letters from Z to A (Citrix PV drivers only) - assignment can be overwritten using Drive Letter Mapping plugin with Volume labels 'Temporary Storage X' where x is a number 0-25)

  • UserData now runs immediately following 'Windows is Ready'


Desktop wallpaper fixes


  • Desktop wallpaper will display hostname by default

  • Removed dependency on Windows Time service

  • Route added in cases where multiple IPs are assigned to a single interface


  • Changes made to Ec2Activation Plugin

  • -Verifies Activation status every 30 days

  • -If Grace Period has 90 days remaining (out of 180), reattempts activation


  • Desktop wallpaper overlay no longer persists with Sysprep or Shutdown without Sysprep

  • Userdata option to run on every service start with <persist>true</persist>

  • Changed location and name of /DisableWinUpdate.cmd to /Scripts/PostSysprep.cmd

  • Administrator password set to not expire by default in /Scripts/PostSysprep.cmd

  • Uninstall will remove EC2Config PostSysprep script from c:\windows\setup\script\CommandComplete.cmd

  • Add Route supports custom interface metrics


UserData Execution no longer limited to 3851 Characters


  • OS Version and language identifier written to console

  • EC2Config version written to console

  • PV driver version written to console

  • Detection of Bug Check and output to the console on next boot when found

  • Option added to config.xml to persist Sysprep credentials

  • Add Route Retry logic in cases of ENI being unavailable at start

  • User Data execution PID written to console

  • Minimum generated password length retrieved from GPO

  • Set service start to retry 3 attempts

  • Added S3_DownloadFile.ps1 and S3_Upload file.ps1 examples to /Scripts folder


  • Version information added to General tab

  • Renamed the Bundle tab to Image

  • Simplified the process of specifying passwords and moved the password-related UI from the General tab to the Image tab

  • Renamed the Disk Settings tab to Storage

  • Added a Support tab with common tools for troubleshooting

  • Windows Server 2003 sysprep.ini set to extend OS partition by default

  • Added the private IP address to the wallpaper

  • Private IP address displayed on wallpaper

  • Added retry logic for Console output

  • Fixed Com port exception for metadata accessibility -- caused EC2Config to terminate before console output is displayed

  • Checks for activation status on every boot -- activates as necessary

  • Fixed issue of relative paths -- caused when manually executing wallpaper shortcut from startup folder; pointing to Administrator/logs

  • Fixed default background color for Windows Server 2003 user (other than Administrator)


  • Console timestamps in UTC (Zulu)

  • Removed appearance of hyperlink on Sysprep tab

  • Addition of feature to dynamically expand Root Volume on first boot for Windows 2008+

  • When Set-Password is enabled, now automatically enables EC2Config to set the password

  • EC2Config checks activation status prior to running Sysprep (presents warning if not activated)

  • Windows Server 2003 Sysprep.xml now defaults to UTC timezone instead of Pacific

  • Randomized Activation Servers

  • Renamed Drive Mapping tab to Disk Settings

  • Moved Initialize Drives UI items from General to the Disk Settings tab

  • Help button now points to HTML help file

  • Updated HTML help file with changes

  • Updated 'Note' text for Drive Letter Mappings

  • Added InstallUpdates.ps1 to /Scripts folder for automating Patches and cleanup prior to Sysprep


  • Desktop wallpaper displays instance information by default upon first logon (not disconnect/reconnect)

  • PowerShell can be run from the userdata by surrounding the code with <powershell></powershell>

Subscribe to EC2Config service notifications

Amazon SNS can notify you when new versions of the EC2Config service are released. Use the following procedure to subscribe to these notifications.

To subscribe to EC2Config notifications
  1. Open the Amazon SNS console at

  2. In the navigation bar, change the Region to US East (N. Virginia), if necessary. You must select this Region because the SNS notifications that you are subscribing to were created in this Region.

  3. In the navigation pane, choose Subscriptions.

  4. Choose Create subscription.

  5. In the Create subscription dialog box, do the following:

    1. For Topic ARN, use the following Amazon Resource Name (ARN):

    2. For Protocol, choose Email.

    3. For Endpoint, type an email address that you can use to receive the notifications.

    4. Choose Create subscription.

  6. You'll receive a email asking you to confirm your subscription. Open the email and follow the directions to complete your subscription.

Whenever a new version of the EC2Config service is released, we send notifications to subscribers. If you no longer want to receive these notifications, use the following procedure to unsubscribe.

To unsubscribe from EC2Config notifications
  1. Open the Amazon SNS console.

  2. In the navigation pane, choose Subscriptions.

  3. Select the subscription and then choose Actions, Delete subscriptions When prompted for confirmation, choose Delete.