/

The Amazon SSM multi-region endpoint

http://ssm.{region}.amazonaws.com

POST

Returns detailed information about command execution for an invocation or plugin.

GetCommandInvocation only gives the execution status of a plugin in a document. To get the command execution status on a specific managed node, use ListCommandInvocations. To get the command execution status across managed nodes, use ListCommands.

Request Example

Shell

JavaScript

Java

Swift

curl --location -g --request POST 'http://ssm.{region}.amazonaws.com/' \
--header 'X-Amz-Target;' \
--header 'Content-Type: application/json' \
--data-raw '{
    "CommandId": "string",
    "InstanceId": "string",
    "PluginName": "string"
}'

Response Example

200 - Example 1

{
    "CommandId": "string",
    "InstanceId": "string",
    "Comment": "string",
    "DocumentName": "string",
    "DocumentVersion": "string",
    "PluginName": "string",
    "ResponseCode": 0,
    "ExecutionStartDateTime": "string",
    "ExecutionElapsedTime": "string",
    "ExecutionEndDateTime": "string",
    "Status": "Pending",
    "StatusDetails": "string",
    "StandardOutputContent": "string",
    "StandardOutputUrl": "string",
    "StandardErrorContent": "string",
    "StandardErrorUrl": "string",
    "CloudWatchOutputConfig": {
        "CloudWatchLogGroupName": "string",
        "CloudWatchOutputEnabled": true
    }
}

Request

Header Params

X-Amz-Target

string

required

Body Params application/json

CommandId

string

required

(Required) The parent command ID of the invocation plugin.

>= 36 characters<= 36 characters

InstanceId

string

required

(Required) The ID of the managed node targeted by the command. A managed node can be an Amazon Elastic Compute Cloud (Amazon EC2) instance, edge device, and on-premises server or VM in your hybrid environment that is configured for Amazon Web Services Systems Manager.

Match pattern:

(^i-(\w{8}|\w{17})$)|(^mi-\w{17}$)

PluginName

string

optional

The name of the step for which you want detailed results. If the document contains only one step, you can omit the name and details for that step. If the document contains more than one step, you must specify the name of the step for which you want to view details. Be sure to specify the name of the step, not the name of a plugin like aws:RunShellScript.

To find the PluginName, check the document content and find the name of the step you want details for. Alternatively, use ListCommandInvocations with the CommandId and Details parameters. The PluginName is the Name attribute of the CommandPlugin object in the CommandPlugins list.

>= 4 characters

Examples

Responses

🟢200Success

application/json

Body

CommandId

string

optional

The parent command ID of the invocation plugin.

>= 36 characters<= 36 characters

InstanceId

string

optional

The ID of the managed node targeted by the command. A managed node can be an Amazon Elastic Compute Cloud (Amazon EC2) instance, edge device, or on-premises server or VM in your hybrid environment that is configured for Amazon Web Services Systems Manager.

Match pattern:

(^i-(\w{8}|\w{17})$)|(^mi-\w{17}$)

Comment

string

optional

The comment text for the command.

<= 100 characters

DocumentName

string

optional

The name of the document that was run. For example, AWS-RunShellScript.

Match pattern:

^[a-zA-Z0-9_\-.]{3,128}$

DocumentVersion

string

optional

The Systems Manager document (SSM document) version used in the request.

Match pattern:

([$]LATEST|[$]DEFAULT|^[1-9][0-9]*$)

PluginName

string

optional

The name of the plugin, or step name, for which details are reported. For example, aws:RunShellScript is a plugin.

>= 4 characters

ResponseCode

integer

optional

The error level response code for the plugin script. If the response code is -1, then the command hasn't started running on the managed node, or it wasn't received by the node.

ExecutionStartDateTime

string

optional

The date and time the plugin started running. Date and time are written in ISO 8601 format. For example, June 7, 2017 is represented as 2017-06-7. The following sample Amazon Web Services CLI command uses the InvokedBefore filter.

aws ssm list-commands --filters key=InvokedBefore,value=2017-06-07T00:00:00Z

If the plugin hasn't started to run, the string is empty.

Match pattern:

^([\-]?\d{4}(?!\d{2}\b))((-?)((0[1-9]|1[0-2])(\3([12]\d|0[1-9]|3[01]))?|W([0-4]\d|5[0-2])(-?[1-7])?|(00[1-9]|0[1-9]\d|[12]\d{2}|3([0-5]\d|6[1-6])))([T\s]((([01]\d|2[0-3])((:?)[0-5]\d)?|24\:?00)([\.,]\d(?!:))?)?(\17[0-5]\d([\.,]\d)?)?([zZ]|([\-])([01]\d|2[0-3]):?([0-5]\d)?)?)?)?$

ExecutionElapsedTime

string

optional

Duration since ExecutionStartDateTime.

Match pattern:

ExecutionEndDateTime

string

optional

The date and time the plugin finished running. Date and time are written in ISO 8601 format. For example, June 7, 2017 is represented as 2017-06-7. The following sample Amazon Web Services CLI command uses the InvokedAfter filter.

aws ssm list-commands --filters key=InvokedAfter,value=2017-06-07T00:00:00Z

If the plugin hasn't started to run, the string is empty.

Match pattern:

Status

enum<string>

optional

The status of this invocation plugin. This status can be different than StatusDetails.

Allowed values:

PendingInProgressDelayedSuccessCancelledTimedOutFailedCancelling

StatusDetails

string

optional

A detailed status of the command execution for an invocation. StatusDetails includes more information than Status because it includes states resulting from error and concurrency control parameters. StatusDetails can show different results than Status. For more information about these statuses, see Understanding command statuses in the Amazon Web Services Systems Manager User Guide. StatusDetails can be one of the following values:

Pending: The command hasn't been sent to the managed node.
In Progress: The command has been sent to the managed node but hasn't reached a terminal state.
Delayed: The system attempted to send the command to the target, but the target wasn't available. The managed node might not be available because of network issues, because the node was stopped, or for similar reasons. The system will try to send the command again.
Success: The command or plugin ran successfully. This is a terminal state.
Delivery Timed Out: The command wasn't delivered to the managed node before the delivery timeout expired. Delivery timeouts don't count against the parent command's MaxErrors limit, but they do contribute to whether the parent command status is Success or Incomplete. This is a terminal state.
Execution Timed Out: The command started to run on the managed node, but the execution wasn't complete before the timeout expired. Execution timeouts count against the MaxErrors limit of the parent command. This is a terminal state.
Failed: The command wasn't run successfully on the managed node. For a plugin, this indicates that the result code wasn't zero. For a command invocation, this indicates that the result code for one or more plugins wasn't zero. Invocation failures count against the MaxErrors limit of the parent command. This is a terminal state.
Cancelled: The command was terminated before it was completed. This is a terminal state.
Undeliverable: The command can't be delivered to the managed node. The node might not exist or might not be responding. Undeliverable invocations don't count against the parent command's MaxErrors limit and don't contribute to whether the parent command status is Success or Incomplete. This is a terminal state.
Terminated: The parent command exceeded its MaxErrors limit and subsequent command invocations were canceled by the system. This is a terminal state.

>= 0 characters<= 100 characters

StandardOutputContent

string

optional

The first 24,000 characters written by the plugin to stdout. If the command hasn't finished running, if ExecutionStatus is neither Succeeded nor Failed, then this string is empty.

<= 24000 characters

StandardOutputUrl

string

optional

The URL for the complete text written by the plugin to stdout in Amazon Simple Storage Service (Amazon S3). If an S3 bucket wasn't specified, then this string is empty.

StandardErrorContent

string

optional

The first 8,000 characters written by the plugin to stderr. If the command hasn't finished running, then this string is empty.

<= 8000 characters

StandardErrorUrl

string

optional

The URL for the complete text written by the plugin to stderr. If the command hasn't finished running, then this string is empty.

CloudWatchOutputConfig

object

optional

Amazon CloudWatch Logs information where Systems Manager sent the command output.

CloudWatchLogGroupName

string

optional

The name of the CloudWatch Logs log group where you want to send command output. If you don't specify a group name, Amazon Web Services Systems Manager automatically creates a log group for you. The log group uses the following naming format:

aws/ssm/SystemsManagerDocumentName

>= 1 characters<= 512 characters

CloudWatchOutputEnabled

boolean

optional

Enables Systems Manager to send command output to CloudWatch Logs.

🟠480InternalServerError

🟠481InvalidCommandId

🟠482InvalidInstanceId

🟠483InvalidPluginName

🟠484InvocationDoesNotExist