Run Ansible over AWS SSM

hosts_aws_ec2.yml

plugin: aws_ec2

regions:
  - eu-central-1

# filter hosts based on name tag. This was used to provision prometheus instances
filters:
  tag:Name: "prometheus.*"

# get nicer hostnames based on the ec2 instance tag
hostnames:
  - tag:Name

compose:
  ansible_inventory: tags.Name
  # tags.ansible_user needs to be set on AWS side.
  ansible_user: tags.ansible_user
  # ansible_host is the instance_id as aws ssm will use this one to connect to the instance
  ansible_host: instance_id
  # use aws ssm as ProxyCommand see https://go.aws/3nrFdH5, don't forget to add AmazonSSMManagedInstanceCore as aws_iam_instance_profile.
  ansible_ssh_common_args: "'-o StrictHostKeyChecking=no -o ProxyCommand=\"sh -c \\'aws ssm start-session --target %h --document-name AWS-StartSSHSession --parameters portNumber=%p\\''"