Cloud-init directive to add AWS SSM checking at boot time

cloudinit.yaml

#cloud-config
write_files:
    - content: |
        #!/bin/bash
        REGION=$( curl -s http://169.254.169.254/latest/dynamic/instance-identity/document | python -c "import sys, json; print json.load(sys.stdin)['region']" )
        aws --region $REGION ssm list-associations --max-items 1 > /dev/null 2>&1
        if [ $? -ne 0 ]; then
          echo "No privs to run Amazon SSM agent. Stopping..."
          sudo stop amazon-ssm-agent
        fi
      path: /var/lib/cloud/scripts/per-boot/ssmcheck.sh
      owner: root:root
      permissions: '0755'