YoU wOuLdNt PuT pOwErShElL iN yAmL

kill-me.json

{
  "schemaVersion": "2.2",
  "description": "Create AD User (writing this gave me AIDS)",
  "parameters": {
    "userName": {
      "type": "String",
      "default": "Enabled"
    },
    "firstName": {
      "type": "String",
      "default": "Enabled"
    },
    "lastName": {
      "type": "String",
      "default": "Enabled"
    }
  },
  "mainSteps": [
    {
      "action": "aws:runPowerShellScript",
      "name": "createAdUser",
      "timeoutSeconds": 30,
      "inputs": {
        "runCommand": [
          "$VerbosePreference = \"Continue\"",
          "$ErrorActionPreference = \"Stop\"",
          "$ADUser = (Get-SSMParameterValue -Name thisIsAss).Parameters[0].Value",
          "$ADPass = (Get-SSMParameterValue -Name whyAmIDoingThis -WithDecryption $True).Parameters[0].Value | ConvertTo-SecureString -asPlainText -Force",
          "$ADCreds = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $ADUser,$ADPass",
          "$Name = '{{ userName }}'",
          "$User = Get-ADUser -Filter {sAMAccountName -eq $Name}",
          "If ($User -ne $Null) { echo 'User already exists.' exit 1 }",
          "New-ADUser -Credential $ADCreds -GivenName '{{ firstName }}' -Surname '{{ lastName }}' -Name '{{ userName }}' -DisplayName '{{ userName }}' -SamAccountName '{{ userName }}' -UserPrincipalName '{{ userName }}''@please.kill.me' -Path 'OU=Users,OU=active,DC=directory,DC=can,DC=die' -PasswordNotRequired $true -ChangePasswordAtLogon $true -Enabled $true -Passthru | ForEach-Object { Add-ADGroupMember -Credential $ADCreds -Identity 'CN=Garbage,OU=Powershell,OU=makes,DC=my,DC=nuts,DC=hurt' -Members $_ } "
        ]
      }
    }
  ]
}

kill-me.yaml

---
schemaVersion: "2.2"
description: "Create AD User (writing this gave me AIDS)"
parameters:
  userName:
    type: String
    default: Enabled
  firstName:
    type: String
    default: Enabled
  lastName:
    type: String
    default: Enabled
mainSteps:
  - action: aws:runPowerShellScript
    name: createAdUser
    timeoutSeconds: 30
    inputs:
      runCommand:
        - '$VerbosePreference = "Continue"'
        - '$ErrorActionPreference = "Stop"'
        - $ADUser = (Get-SSMParameterValue -Name thisIsAss).Parameters[0].Value
        - $ADPass = (Get-SSMParameterValue -Name whyAmIDoingThis -WithDecryption $True).Parameters[0].Value | ConvertTo-SecureString -asPlainText -Force
        - $ADCreds = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $ADUser,$ADPass
        - "$Name = '{{ userName }}'"
        - $User = Get-ADUser -Filter {sAMAccountName -eq $Name}
        - "If ($User -ne $Null) {
                echo 'User already exists.'
                exit 1
           }"
        - "New-ADUser
          -Credential $ADCreds
          -GivenName '{{ firstName }}'
          -Surname '{{ lastName }}'
          -Name '{{ userName }}'
          -DisplayName '{{ userName }}'
          -SamAccountName '{{ userName }}'
          -UserPrincipalName '{{ userName }}''@please.kill.me'
             -Path 'OU=Users,OU=active,DC=directory,DC=can,DC=die'
             -PasswordNotRequired $true
             -ChangePasswordAtLogon $true
             -Enabled $true
             -Passthru | ForEach-Object {
               Add-ADGroupMember
               -Credential $ADCreds
               -Identity 'CN=Garbage,OU=Powershell,OU=makes,DC=my,DC=nuts,DC=hurt'
               -Members $_
              }
          "