View a markdown version of this page

Step 2: Create a Systems Manager Cloud Connector - Amazon Systems Manager
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Step 2: Create a Systems Manager Cloud Connector

After the Amazon Config connector is set up, create the Systems Manager Cloud Connector. The Systems Manager Cloud Connector stores the Azure tenant and subscription configuration and links it to the Amazon Config connector.

To create a Systems Manager Cloud Connector

  1. Run the following command. Replace the placeholder values with your Azure tenant ID, the Systems Manager application (client) ID, subscription IDs, the Systems Manager Azure federation role ARN, and the Amazon Config connector ARN from Step 1.

    aws ssm create-cloud-connector \
    --display-name "MyAzureConnector" \
    --configuration '{
        "AzureConfiguration": {
            "TenantId": "TENANT_ID",
            "ApplicationId": "SSM_APP_CLIENT_ID",
            "Targets": {
                "Subscriptions": [
                    {"Id": "SUBSCRIPTION_ID"}
                ]
            }
        }
    }' \
    --role-arn "arn:aws:iam::ACCOUNT_ID:role/service-role/SSM-AzureRole-CONNECTOR_NAME-ID8" \
    --config-connector-arn CONFIG_CONNECTOR_ARN

    To target all subscriptions in the tenant (tenant-level setup), omit the Targets field from the configuration.

    The response returns the CloudConnectorId. Note this value for future operations.

  2. Verify the Cloud Connector was created successfully:

    aws ssm get-cloud-connector \
    --cloud-connector-id CLOUD_CONNECTOR_ID