View a markdown version of this page

Enable VM onboarding (Amazon Web Services Management Console) - Amazon Systems Manager
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Enable VM onboarding (Amazon Web Services Management Console)

To enable VM onboarding in the Amazon Web Services Management Console:

  1. Open the Systems Manager console. In the navigation pane, choose Hybrid and Multicloud nodes.

  2. Choose the Cloud Connector for which you want to enable VM onboarding.

  3. Choose Install and configure SSM Agent.

  4. Configure the following settings:

    GCP Region selection

    Choose whether to enable all GCP Regions (recommended) or select specific Regions where your VMs are located.

    State Manager association role (automation dispatch role)

    The IAM role that State Manager assumes to dispatch automation executions. This role passes the Automation execution role to Automation when launching the onboarding workflow. For the trust policy and permissions required by this role, see Automation dispatch role.

    Automation execution role (automation assume role)

    The IAM role that Automation assumes to execute the agent installation runbook. This role assumes the GCP federation role to authenticate with GCP through OIDC, creates hybrid activations, and manages managed instances. For the trust policy and permissions required by this role, see Automation assume role.

    Hybrid activation instance role

    The IAM role assigned to GCP VMs when they register as managed instances. This role must trust ssm.amazonaws.com and have the AmazonSSMManagedInstanceCore policy attached. For more information, see Managed instance role.

    VM tags

    Optionally, add tags to apply to managed instances during onboarding. The CloudConnector tag is applied automatically (see Tags applied to managed instances). You can add more tags to further organize your managed fleet.

  5. Choose Connect.

Systems Manager creates the association and begins onboarding GCP VMs. You can monitor the progress on the connector details page.