---
title: AWS SSM User Guide
slug: product-features/aws-ssm-user-guide
createdAt: 2026-03-02T20:13:37.846Z
---

# Overview

Using AWS Systems Manager (SSM) command scripts, you can control and automate your AWS resources. In this guide, you will learn how to connect and run SSM commands from your Zixi Broadcaster.

# Steps

Follow these steps to initiate SSM commands from within ZEN Master.

## Step 1: Update AWS IAM Policy

With the Feb 2026 release of ZEN Master, the AWS IAM policy has been updated to include authorization for SSM.

1. Sign in to ZEN Master.
2. In the left navigation, hover over **Configuration** and select **Amazon AWS**.
3. In the top tabs, select **Documentation**.
4. For the **policy document JSON file**, select the copy icon to the right of step 3.
   This latest set of permissions allows ZEN Master to trigger SSM documents.

![Create an IAM Role for ZEN Master](https://api.archbee.com/api/optimize/mzxtTQEvCNIdUNgF2kuwJ/hhcZsWaVzFwvMZl59NOCo_.blob)

5. Sign in to your AWS IAM console.
6. Select the **Policies** page.

::Image[]{src="https://api.archbee.com/api/optimize/mzxtTQEvCNIdUNgF2kuwJ/A7Yq9Tp97OJ29jeR7sGOr_.blob" size="40" width="349" height="538" position="center" alt="Select Policies Page" showCaption="false"}

7. Either update an existing policy or create a new policy using the copied permissions.
   1. If you are creating a new policy and role, *follow the steps in the ZEN Master Documentation tab*.

## Step 2: Create a Role with SSM Agent

Next, create a Role with the SSM Agent installed.

1. Return to your AWS IAM console.
2. Select **Roles** and then **Create Role**.
3. Select **EC2**.
4. In the **Add permissions** screen, search for **SSM**.
5. Select the SSM agent: **AmazonSSMManagedInstanceCore**
6. Click **Next**.
7. In the **Name, review, and create screen**, enter the following:
   1. Role name 
   2. Description 
   3. Leave the default trust policy and permissions
8. Click **Create role**.
9. View your new role and copy the **Instance profile ARN**.

## Step 3: Apply the Role to your Cluster

Now, you can apply the AWS Role to your ZEN Master Broadcaster Cluster.

1. Return to ZEN Master.
2. In the left navigation, select **Broadcasters**.
3. Select a Broadcaster Cluster and click **Edit**.

![Broadcaster Cluster](https://api.archbee.com/api/optimize/mzxtTQEvCNIdUNgF2kuwJ/7E1sMbkO6PDZujHTwRX9F_.blob)

4. Find the **Instance profile ARN** field and paste in your value from the new Role you created in AWS.

![Insert Instance Profile ARN](https://api.archbee.com/api/optimize/mzxtTQEvCNIdUNgF2kuwJ/jJjLGR1hsEFbpuH59hwZJ_.blob)

5. Click **Save**.

You can now initiate an SSM document from a Broadcaster within this Cluster.

## Step 4: Create an SSM Document

In the AWS IAM console, you will create an AWS Systems Manager (SSM) Command Document.

1. In AWS, go to the AWS Systems Manager.
2. In the left navigation, select **Documents**.
3. Expand the **Create document** button and select **Command or session**.
4. In the Document details screen, enter the following:
   1. Name
   2. Target type - **AWS: EC2 Instance** 
   3. Content JSON – Update with your script 

Here’s an example script that you can try. This example returns 'hello' whether the instance is running Linux or Windows.

```json
{ 
  "schemaVersion": "2.2", 
  "description": "A simple document to echo hello to the command line.", 
  "mainSteps": [ 
    { 
      "action": "aws:runShellScript", 
      "name": "echoHelloLinux", 
      "precondition": { 
        "StringEquals": [ 
          "platformType", 
          "Linux" 
        ] 
      }, 
      "inputs": { 
        "runCommand": [ 
          "echo 'hello'" 
        ] 
      } 
    }, 
    { 
      "action": "aws:runPowerShellScript", 
      "name": "echoHelloWindows", 
      "precondition": { 
        "StringEquals": [ 
          "platformType", 
          "Windows" 
        ] 
      }, 
      "inputs": { 
        "runCommand": [ 
          "Write-Output 'hello'" 
        ] 
      } 
    } 
  ] 
} 
```

5. Click **Create document**.

## Step 5: Initiate SSM Document from ZEN Master

Your new SSM document will now appear as an option to select in ZEN Master.

1. Return to your Cluster in ZEN Master.
2. Edit a Broadcaster within the Cluster.
3. In the top right, select the kabob menu and select **Run SSM Command**.

![Run SSM Command Option](https://api.archbee.com/api/optimize/mzxtTQEvCNIdUNgF2kuwJ/UQ3YgLgLO1Cknt6A8kc95_.blob)

4. Expand **Available SSM Scripts**. You should see your new SSM document in the list.
5. Select your new SSM document.
6. Click **Run SSM Command**.

![Run SSM Command](https://api.archbee.com/api/optimize/mzxtTQEvCNIdUNgF2kuwJ/L2fxGjfjoLTJYAxuj2Zmx_.blob)

In the **SSM Command Output** window, you will see the command-line output on the instance. *Note that only the last 10 lines of output are displayed in the output window.*

![SSM Command Output](https://api.archbee.com/api/optimize/mzxtTQEvCNIdUNgF2kuwJ/f6a-Lz3oBWVyFnCa6-mQD_image.png)

If you want to write the output to an S3 bucket, you can do this in AWS within your SSM document.

:::hint{type="info"}
Coming soon, you will be able to write the output to an S3 bucket from ZEN Master.
:::