Public/SSM/Invoke-ATSSMPowerShellScript.ps1
|
function Invoke-ATSSMPowerShellScript { <# .SYNOPSIS Run PowerShell on hosts using SSM AWS-RunPowerShellScript. .PARAMETER InstanceIds List of instance IDs identifying instances to run the script on. .PARAMETER AsJson If set, attempt to parse command output as a JSON string and convert to an object. .PARAMETER AsText Print command output from each instance to the console .PARAMETER ScriptBlock ScriptBlock containing the script to run. .PARAMETER ExecutionTimeout The time in seconds for a command to be completed before it is considered to have failed. Default is 3600 (1 hour). Maximum is 172800 (48 hours). .PARAMETER Deliverytimeout The time in seconds for a command to be delivered to a target instance. Default is 600 (10 minutes). .OUTPUTS [PSObject], none If -AsText specified, then none Else List of PSObject, one per instance containing the following fields - InstanceId Instance for which this result pertains to - ResultObject If -AsJson and the result was successfully parsed, then an object else NULL - ResultText Standard Output returned by the script (Write-Host etc.) .EXAMPLE Invoke-ATSSMPowerShellScript -InstanceIds ('i-00000001', 'i-00000002') -ScriptBlock { net user me mypassword /add ; net localgroup Administrators me /add } Creates a windows user and adds to local administrators group on given instances .EXAMPLE Invoke-ATSSMPowerShellScript -InstanceIds ('i-00000001', 'i-00000002') -AsJson -ScriptBlock { Invoke-RestMethod http://localhost/status | ConvertTo-Json } Calls a local rest service, returning a JSON string and parse the result back into an object. .EXAMPLE Invoke-ATSSMPowerShellScript -InstanceIds i-00000000 -AsText { dir c:\ } Returns directory listing from remote instance to the console. #> param ( [Parameter(Mandatory=$true)] [string[]]$InstanceIds, [Parameter(Mandatory=$true, Position = 0)] [scriptblock]$ScriptBlock, [Parameter(ParameterSetName = 'json')] [switch]$AsJson, [Parameter(ParameterSetName = 'text')] [switch]$AsText, [int]$ExecutionTimeout = 3600, [int]$DeliveryTimeout = 600 ) #region Local Functions function Split-Array { param ( [Array]$Array, [Parameter(ParameterSetName = 'Parts')] [int]$Parts, [Parameter(ParameterSetName = 'Size')] [int]$Size ) switch ($PSCmdlet.ParameterSetName) { 'Parts' { $partSize = [Math]::Ceiling($Array.count / $parts) } 'Size' { $partSize = $size $Parts = [Math]::Ceiling($Array.count / $size) } } $outArray = @() for ($i=1; $i -le $Parts; $i++) { $start = (($i - 1) * $partSize) $end = ($i * $partSize) - 1 if ($end -ge $Array.count - 1) { $end = $Array.count - 1 } $outArray += ,@($Array[$start..$end]) } return ,$outArray } #endregion $InstanceIds = $InstanceIds | Where-Object { $null -ne $_ } $numInstances = ($InstanceIds | Measure-Object).Count if ($numInstances -eq 0) { Write-Warning "No instances specified!" return } if ($numInstances -gt 50) { $instanceGroups = Split-Array -Array $InstanceIds -Size 50 } else { $instanceGroups = @() $instanceGroups += ,@($InstanceIds) } $InstanceGroups | ForEach-Object { $instanceGroup = $_ # Build SSM command structure $runCommandParams = @{ 'DocumentName' = 'AWS-RunPowerShellScript' 'InstanceId' = $instanceGroup 'TimeoutSeconds' = $DeliveryTimeout 'Parameter' = @{ 'workingDirectory' = [string]::Empty 'executionTimeout' = $ExecutionTimeout.ToString() 'commands' = $ScriptBlock.ToString() -split [Environment]::NewLine } } if ($instanceGroup.Length -gt 4) { $sb = New-Object System.Text.StringBuilder $sb.AppendLine('Sending SSM command to:') | Out-Null $s = Split-Array -Array $instanceGroup -Size 4 $s | Foreach-Object { $sb.AppendLine(" $($_ -join ', ')") | Out-Null } Write-Host $sb.ToString() } else { Write-Host "Sending SSM command to $($instanceGroup -join ', ')" } $cmd = Send-SSMCommand @runCommandParams Write-Host "Submitted command with ID $($cmd.CommandId) and waiting for status..." while (('Pending', 'InProgress') -icontains $cmd.Status) { Start-Sleep -Seconds 5 $cmd = Get-SSMCommand -CommandId $cmd.CommandId } if ($cmd.Status -ine 'Success') { if ($cmd.StatusDetails) { throw "The command did not complete successfully. Status is $($cmd.StatusDetails). Check in SSM console for reason." } else { throw "The command did not complete successfully. Check in SSM console for reason." } } # Collect results $instanceGroup | Foreach-Object { $detail = Get-SSMCommandInvocationDetail -CommandId $cmd.CommandId -InstanceId $_ $obj = $null if ($AsJson) { try { $obj = $detail.StandardOutputContent | ConvertFrom-Json } catch { $obj = $null } } if ($AsText) { Write-Host "----------- Instance $_ ----------- " if (-not ([string]::IsNullOrEmpty($detail.StandardOutputContent))) { Write-Host Write-Host $detail.StandardOutputContent Write-Host } if (-not ([string]::IsNullOrEmpty($detail.StandardErrorContent))) { Write-Host Write-Host -ForegroundColor Red $detail.StandardOutputContent Write-Host } } else { New-Object PSObject -Property @{ InstanceId = $_ ResultObject = $obj ResultText = $detail.StandardOutputContent } } } } } |