Back to Teleport

SSM Invocation failed

lib/usertasks/descriptions/ec2-ssm-invocation-failure.md

19.0.1-dev732 B
Original Source

SSM Invocation failed

Teleport failed to access the SSM Agent to auto enroll the instance. Some instances failed to communicate with the AWS Systems Manager service to execute the install script.

Usually this happens when:

Missing policies

The IAM Role used by the integration might be missing some required permissions. Ensure the following actions are allowed in the IAM Role used by the integration:

  • account:ListRegions
  • ec2:DescribeInstances
  • ssm:DescribeInstanceInformation
  • ssm:GetCommandInvocation
  • ssm:ListCommandInvocations
  • ssm:SendCommand

SSM Document is invalid

Teleport uses an SSM Document to run an installation script. If the document is changed or removed, it might no longer work.