AWS Tools for PowerShellでSSM Session Manager Pluginを使える様にしてみた

# AWS Tools for PowerShellではSession Manager Pluginと連動せずセッション情報を返すだけ
PS C:\> Start-SSMSession -Target i-0123456789abc

SessionId                                                   StreamUrl
---------                                                   ---------
aws-dotnet-sdk-session-xxxxxxxxxxxxxxxxxx-xxxxxxxxxxxxxxxxx wss://ssmmessages.ap-northeast-1.amazonaws.com/v1/data-cha…

// ValidateInputAndStartSession validates input sent from AWS CLI and starts a session if validation is successful.
// AWS CLI sends input in the order of
// args[0] will be path of executable (ignored)
// args[1] is session response
// args[2] is client region
// args[3] is operation name
// args[4] is profile name from aws credentials/config files
// args[5] is parameters input to aws cli for StartSession api
// args[6] is endpoint for ssm service

{"Target":"i-0123456789abc"}

https://ssm.ap-northeast-1.amazonaws.com

function Start-SSMSessionEx () {
    [CmdletBinding()]
    param (
        [Parameter(Mandatory = $false, Position = 1)]
        [string]$DocumentName,
        [Parameter(Mandatory = $false)]
        [hashtable]$Parameter,
        [Parameter(Mandatory = $false)]
        [string]$Reason,
        [Parameter(Mandatory = $true)]
        [string]$Target,
        [Parameter(Mandatory = $false)]
        [switch]$PassThru,
        [Parameter(Mandatory = $false)]
        [string]$ProfileName,
        [Parameter(Mandatory = $false)]
        [object]$Region
    )

    if (-not (Get-Command 'session-manager-plugin' -Type Application -ErrorAction Ignore)) {
        $message = @'
SessionManagerPlugin (session-manager-plugin) is not found.
Please refer to SessionManager Documentation here:
https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-working-with-install-plugin.html
'@
        Write-Error $message
        return
    }

    $session = $null
    try {
        $params = @{
            Parameter   = $Parameter
            Target      = $Target
            ProfileName = $ProfileName
            Region      = $Region
        }
        if (-not [string]::IsNullOrEmpty($DocumentName)) {
            $params['DocumentName'] = $DocumentName
        }
        if (-not [string]::IsNullOrEmpty($Reason)) {
            $params['Reason'] = $Reason
        }
        $session = Start-SSMSession @params
    } catch {
        Write-Error $_
        return
    }
    if ($null -eq $session) {
        Write-Error 'Failed to get SSM session.'
        return
    }

    # Start SSM Session manager plugin
    if ([string]::IsNullOrEmpty($ProfileName)) {
        $ProfileName = $StoredAWSCredentials
    }
    if ([string]::IsNullOrEmpty($Region)) {
        $Region = (Get-DefaultAWSRegion).Region
    }
    # Setup arguments
    $arguments = @()
    # arg1 : session json
    $arguments += "`"$((($session | ConvertTo-Json -Compress) -replace '"', '\"'))`""
    # arg2 : region name
    $arguments += $Region
    # arg3 : StartSession
    $arguments += 'StartSession'
    # arg4 : shared credentials file profile nam
    $arguments += $ProfileName
    # arg5 : parameter json
    $arg5hash = @{ Target = $Target; }
    if (-not [string]::IsNullOrEmpty($DocumentName)) {
        $arg5hash['DocumentName'] = $DocumentName
    }
    if ($null -ne $Parameter) {
        $arg5hash['Parameter'] = $Parameter
    }
    if (-not [string]::IsNullOrEmpty($Reason)) {
        $arg5hash['Reason'] = $Reason
    }
    $arguments += "`"$(($arg5hash | ConvertTo-Json -Compress) -replace '"', '\"')`""
    # arg 6 : SSM endpoint URL
    $arguments += "https://ssm.$($region).amazonaws.com"
    Write-Verbose 'session-manager-plugin arguments'
    for ($i = 0; $i -lt $arguments.Count; $i++) {
        Write-Verbose "  arg$($i + 1) : $($arguments[$i])"
    }
    # start session-manager-plugin
    if ($PassThru) {
        # PassThru
        $proc = Start-Process -FilePath 'session-manager-plugin' -ArgumentList $arguments -PassThru -WindowStyle Hidden
        Write-Host ('Starting session with SessionId: {0}' -f $session.SessionId)
        Write-Host ('Start session-manager-plugin process ({0})' -f $proc.Id)
        return [PSCustomObject]@{
            Session = $session
            Process = $proc
        }
    } else {
        # Wait
        Start-Process -FilePath 'session-manager-plugin' -ArgumentList $arguments -Wait -NoNewWindow
    }
}

# 33389 → 3389 ポートへのフォーワード
$params = @{
   Target       = 'i-01234567890abcdef'
   DocumentName = 'AWS-StartPortForwardingSession'
   Parameter    = @{portNumber = @('3389'); localPortNumber = @('33389') }
}
Start-SSMSessionEx @params