Reviewing and approving or rejecting change requests - Amazon Systems Manager
Reviewing and approving or rejecting change requests (console)Reviewing and approving or rejecting a change request (command line)
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Reviewing and approving or rejecting change requests

If you're specified as a reviewer for a change request in Change Manager, a capability of Amazon Systems Manager, you're notified through an Amazon Simple Notification Service (Amazon SNS) topic when a new change request is awaiting your review.

Note

This functionality depends on whether an Amazon SNS was specified in the change template for sending review notifications. For information, see Configuring Amazon SNS topics for Change Manager notifications.

To review the change request, you can follow the link in your notification, or sign in to the Amazon Web Services Management Console directly and follow the steps in this procedure.

Note

If an Amazon SNS topic is assigned for reviewers in a change template, notifications are sent to the topic's subscribers when the change request changes status.

For more information about approvals for change requests, see About change request approvals.

Reviewing and approving or rejecting change requests (console)

The following procedures describe how to use the Systems Manager console to review and approve or reject change requests.

To review and approve or reject a single change request

  1. Open the link in the email notification you received and sign in to the Amazon Web Services Management Console, which directs you to the change request for your review.

  2. In the summary page, review the proposed content of the change request.

    To approve the change request, choose Approve. In the dialog box, provide any comments you want to add for this approval, and then choose Approve. The runbook workflow represented by this request starts to run either when scheduled, or as soon as changes aren't blocked by any restrictions.

    -or-

    To reject the change request, choose Reject. In the dialog box, provide any comments you want to add for this rejection, and then choose Reject.

To review and approve or reject change requests in bulk

  1. Open the Amazon Systems Manager console at https://console.amazonaws.cn/systems-manager/.

  2. In the navigation pane, choose Change Manager.

    -or-

    If the Amazon Systems Manager home page opens first, choose the menu icon ( The menu icon ) to open the navigation pane, and then choose Change Manager.

  3. Choose the Approvals tab.

  4. (Optional) Review the details of requests pending your approval by choosing the name of each request, and then return to the Approvals tab.

  5. Select the check box of each change request that you want to approve.

    -or-

    Select the check box of each change request that you want to reject.

  6. In the dialog box, provide any comments you want to add for this approval or rejection.

  7. Depending on whether you're approving or rejecting the selected change requests, choose Approve or Reject.

Reviewing and approving or rejecting a change request (command line)

The following procedure describes how to use the Amazon Command Line Interface (Amazon CLI) (on Linux, macOS, or Windows) to review and approve or reject a change request.

To review and approve or reject a change request

  1. Install and configure the Amazon Command Line Interface (Amazon CLI), if you haven't already.

    For information, see Installing or updating the latest version of the Amazon CLI.

  2. Create a JSON file on your local machine that specifies the parameters for your Amazon CLI call. 

    {
  "OpsItemFilters": 
  [
    {
      "Key": "OpsItemType",
      "Values": ["/aws/changerequest"],
      "Operator": "Equal"
    }
  ],
  "MaxResults": number
}

    You can filter the results for a specific approver by specifying the approver's Amazon Resource Name (ARN) in the JSON file. Here is an example.

    {
  "OpsItemFilters": 
  [
    {
      "Key": "OpsItemType",
      "Values": ["/aws/changerequest"],
      "Operator": "Equal"
    },
    {
      "Key": "ChangeRequestByApproverArn",
      "Values": ["arn:aws-cn:iam::account-id:user/user-name"],
      "Operator": "Equal"
    }
  ],
  "MaxResults": number
}

  3. Run the following command to view the maximum number of change requests you specified in the JSON file.

    Linux & macOS
    aws ssm describe-ops-items \
--cli-input-json file://filename.json
    Windows
    aws ssm describe-ops-items ^
--cli-input-json file://filename.json

  4. Run the following command to approve or reject a change request.

    Linux & macOS
    aws ssm send-automation-signal \
    --automation-execution-id ID \
    --signal-type Approve_or_Reject \
    --payload Comment="message"
    Windows
    aws ssm send-automation-signal ^
--automation-execution-id ID ^
    --signal-type Approve_or_Reject ^
    --payload Comment="message"

    If an Amazon SNS topic has been specified in the change template you chose for the request, notifications are sent when the request is rejected or approved. If you don't receive notifications for the request, you can return to Change Manager to check the status of your request. For information about other options when using this command, see send-automation-signal in the Amazon Systems Manager section of the Amazon CLI Command Reference.