← Package directory
Available on winget

Install Amazon SSM Agent

An agent to enable remote management of your EC2 instances, on-premises servers, or virtual machines (VMs).

Install with winget
winget install --id Amazon.SSMAgent
Upgrade
winget upgrade --id Amazon.SSMAgent
Uninstall
winget uninstall --id Amazon.SSMAgent

About Amazon SSM Agent

AWS Systems Manager Agent (SSM Agent) is Amazon software that runs on Amazon Elastic Compute Cloud (Amazon EC2) instances, edge devices, on-premises servers, and virtual machines (VMs). SSM Agent makes it possible for Systems Manager to update, manage, and configure these resources. The agent processes requests from the Systems Manager service in the AWS Cloud, and then runs them as specified in the request. SSM Agent then sends status and execution information back to the Systems Manager service by using the Amazo...

What's new in 3.3.4793.0

- Add multicloud support enabling SSM Agent registration with Azure cloud providers - Add support for the upcoming public key in the agent code

Read release notes

Version history

Version Updated Notes
3.3.4793.0 Unknown - Add multicloud support enabling SSM Agent registration with Azure cloud providers - Add support for the upcoming public key in the agent code
3.3.4624.0 Unknown - Bump golang.org/x/crypto from v0.51.0 to v0.52.0 - Bump golang.org/x/net from v0.54.0 to v0.55.0 - Enforce directory boundary in BuildSafePath - Fix visibility issue with Bottlerocket OS in document output - Update go-...
3.3.4515.0 Unknown - Bump golang.org/x/net from v0.48.0 to v0.53.0 - Quit if sysprep failed and log its current state - Remove attached legacy cloudwatch plugin packages - Upgrade Go version to 1.25.10 - Use BuildSafePath wherever it is ap...
3.3.4268.0 Unknown - Add SSM Distributor support for Bottlerocket OS - Implement flush credentials command in ssm-cli - Log ec2messages access denied as debug instead of error to reduce log noise - Make credential refresher refresh cache q...
3.3.4177.0 Unknown - Add EnforceWorkspaceRootOwnership configuration to support disable hardening of agent workspace - Add reboot comment to Windows shutdown command for SSM Agent traceability - Update privilege access check to verify owne...
3.3.4121.0 Unknown - Add read-only version check prior to install and uninstall in case of occupied package manager locks - Add ANSI processing for CloudWatch and S3 log - Upgrade go-git to v5.17.0 and cloudflare/circl to v1.6.3 to fix CVE...
3.3.4108.0 Unknown - Disable Go 1.25 container-aware GOMAXPROCS to prevent holding cgroup file descriptors open - Upgrade Go version to 1.25.8
3.3.3797.0 Unknown Release notes
3.3.3598.0 Unknown Release notes
3.3.3572.0 Unknown Release notes
3.3.3270.0 Unknown Release notes
3.3.3185.0 Unknown Release notes
3.3.3050.0 Unknown - Add EU sovereign cloud S3 endpoint for DownloadContent plugin - Add configurable credential rotation max backoff interval
3.3.2958.0 Unknown - Migrate from twinj/uuid to google/uuid library - Allow newer agent versions to be installed when deploying on Greengrass - Harden function to remove non-admin run command documents in execution path - Fix macOS credent...
3.3.2299.0 Unknown - Allow custom hibernation max interval configuration - Refactor hibernation to fix ping leak and correct interval behavior - Remove dependency on s3:GetObject for aws:configurePackage plugin - Fix issue where ssm-setup-...
3.3.1345.0 Unknown - Revert "Update configurePackage to use fixed download method" - Revert "Use a single syscall for route table for health check IP"