• The Amazon Systems Manager CloudWatch Dashboard will no longer be available after April 30, 2026. Customers can continue to use Amazon CloudWatch console to view, create, and manage their Amazon CloudWatch dashboards, just as they do today. For more information, see [Amazon CloudWatch Dashboard documentation](https://docs.amazonaws.cn/AmazonCloudWatch/latest/monitoring/CloudWatch_Dashboards.html). 

# Update just-in-time node access session preferences
<a name="systems-manager-just-in-time-node-access-session-preferences"></a>

With just-in-time node access, you can specify general session and logging preferences in each Amazon Web Services account and Amazon Web Services Region in your organization. Alternatively, you can use Amazon CloudFormation StackSets to create a session preferences document in multiple accounts and Regions to help you have consistent session preferences. For information about the schema for session preferences documents, see [Session document schema](session-manager-schema.md).

For logging purposes, we recommend using the streaming option with Amazon CloudWatch Logs. This feature allows you to send a continual stream of session data logs to CloudWatch Logs. Essential details, such as the commands a user has run in a session, the ID of the user who ran the commands, and timestamps for when the session data is streamed to CloudWatch Logs, are included when streaming session data. When streaming session data, the logs are JSON-formatted to help you integrate with your existing logging solutions.

Systems Manager doesn't automatically terminate just-in-time node access sessions. As a best practice, specify values for the *maximum session duration* and *idle session timeout* settings. Using these settings helps you to prevent a user from remaining connected to a node longer than the window of time approved in an access request. The following procedure describes how to update session preferences for just-in-time node access.

**Important**  
You must tag the Amazon KMS keys used for Session Manager encryption and RDP recording in just-in-time node access with the tag key `SystemsManagerJustInTimeNodeAccessManaged` and tag value `true`.  
For information about tagging KMS keys, see [Tags in Amazon KMS](https://docs.amazonaws.cn/kms/latest/developerguide/tagging-keys.html) in the *Amazon Key Management Service Developer Guide*.

**To update session preferences**

1. Open the Amazon Systems Manager console at [https://console.amazonaws.cn/systems-manager/](https://console.amazonaws.cn/systems-manager/).

1. Select **Settings** in the navigation pane.

1. Select the **Just-in-time node access** tab.

1. In the **Session preferences** section, select **Edit**.

1. Update your general and logging preferences as needed and select **Save**.