View a markdown version of this page

Step 2: Create an Systems Manager Cloud Connector - Amazon Systems Manager
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Step 2: Create an Systems Manager Cloud Connector

After the Cloud Connector is set up, create the Systems Manager Cloud Connector. The Systems Manager Cloud Connector stores the Azure tenant and subscription configuration and links it to the connector.

To create an Systems Manager Cloud Connector

  1. Run the following command. Replace the placeholder values with your Azure tenant ID, the Systems Manager application (client) ID, subscription IDs, the Systems Manager Azure federation role ARN, and the connector ARN from Step 1.

    aws ssm create-cloud-connector \
    --display-name "MyAzureConnector" \
    --configuration '{
        "AzureConfiguration": {
            "TenantId": "TENANT_ID",
            "ApplicationId": "SSM_APP_CLIENT_ID",
            "Targets": {
                "Subscriptions": [
                    {"Id": "SUBSCRIPTION_ID"}
                ]
            }
        }
    }' \
    --role-arn "arn:aws:iam::ACCOUNT_ID:role/service-role/SSM-AzureRole-CONNECTOR_NAME-ID8" \
    --config-connector-arn CONFIG_CONNECTOR_ARN

    To target all subscriptions in the tenant (tenant-level setup), omit the Targets field from the configuration.

    The response returns the CloudConnectorId and CloudConnectorArn. Note these values for future operations.

  2. Verify the Cloud Connector was created successfully:

    aws ssm get-cloud-connector \
    --cloud-connector-id CLOUD_CONNECTOR_ID