1つのSSMドキュメントで複数OSのEC2インスタンスに対し、OSごとに異なるコマンドを実行する

schemaVersion: '0.3'
description: Check OS settings using SSM Automation with loop.
assumeRole: '{{ AutomationAssumeRole }}'
parameters:
  AutomationAssumeRole:
    type: String
    description: (Optional) The ARN of the role that allows Automation to perform the actions on your behalf.
  InstanceId:
    type: StringList
    description: The IDs of the EC2 instances to check.
  CheckHostname:
    type: String
    default: check
    description: Check hostname or skip.
    allowedValues:
      - check
      - skip
mainSteps:
  - name: ProcessInstances
    action: aws:loop
    isEnd: true
    inputs:
      Iterators: '{{ InstanceId }}'
      Steps:
        - name: GetInstancePlatform
          action: aws:executeAwsApi
          nextStep: CheckPlatform
          isEnd: false
          inputs:
            Service: ec2
            Api: DescribeInstances
            InstanceIds:
              - '{{ ProcessInstances.CurrentIteratorValue }}'
          outputs:
            - Name: Platform
              Selector: $.Reservations[0].Instances[0].PlatformDetails
              Type: String
        - name: CheckPlatform
          action: aws:branch
          inputs:
            Choices:
              - NextStep: RunWindowsCommand
                Variable: '{{ GetInstancePlatform.Platform }}'
                Contains: Windows
              - NextStep: RunLinuxCommand
                Variable: '{{ GetInstancePlatform.Platform }}'
                Contains: Linux
            Default: ThrowError
        - name: ThrowError
          action: aws:executeScript
          isEnd: true
          inputs:
            Runtime: python3.11
            Handler: throw_error
            Script: |
              def throw_error(events, context):
                  raise Exception("Unsupported platform detected. Only Linux and Windows are supported.")
        - name: RunLinuxCommand
          action: aws:runCommand
          maxAttempts: 1
          timeoutSeconds: 10
          isEnd: true
          inputs:
            DocumentName: AWS-RunShellScript
            Parameters:
              commands:
                - if [[ "{{ CheckHostname }}" == "check" ]]; then hostname; else echo "Skipping hostname check"; fi
              executionTimeout: '10'
            InstanceIds:
              - '{{ ProcessInstances.CurrentIteratorValue }}'
        - name: RunWindowsCommand
          action: aws:runCommand
          maxAttempts: 1
          timeoutSeconds: 180
          isEnd: true
          inputs:
            DocumentName: AWS-RunPowerShellScript
            Parameters:
              commands:
                - chcp 65001
                - hostname
            InstanceIds:
              - '{{ ProcessInstances.CurrentIteratorValue }}'

'{{ InstanceId }}'

{"CurrentIteration":1,"CurrentIteratorValue":"i-aaaaaaaaa"}

{"CurrentIteration":1,"CurrentIteratorValue":"i-bbbbbbbbb"}

def throw_error(events, context):
    raise Exception("Unsupported platform detected. Only Linux and Windows are supported.")

aws ssm start-automation-execution \
    --document-name "check-linux-windows" \
    --parameters "AutomationAssumeRole=arn:aws:iam::012345678901:role/AWS-SystemsManager-AutomationExecutionRole,\
        CheckHostname=check" \
    --target-parameter-name InstanceId \
    --targets Key=tag:ssm-automation,Values=true