AWS Systems Manager
BetaThis source is currently in beta. It works end to end, but you may still hit rough edges. Let us know if you do.
Let AI connect your sources for you
Skip the manual setup — run this in your project and the wizard auto-detects your databases and APIs and connects them to PostHog.
Connect AWS Systems Manager to PostHog to sync your data into the PostHog data warehouse for analysis and modeling.
Sync fleet inventory, compliance, associations, documents, patching, sessions, and OpsItems from one AWS region.
Grant these IAM permissions for the tables you select:
ssm:DescribeInstanceInformation, ssm:GetInventory, ssm:GetInventorySchema, ssm:ListInventoryEntries,
ssm:ListResourceComplianceSummaries, ssm:ListComplianceItems, ssm:ListAssociations,
ssm:DescribeAssociationExecutions, ssm:DescribeAssociationExecutionTargets, ssm:ListDocuments,
ssm:DescribePatchBaselines, ssm:DescribeInstancePatchStates, ssm:DescribeInstancePatches,
ssm:DescribeSessions, ssm:DescribeOpsItems, and ssm:ListOpsItemEvents.
Enter an access key ID and secret access key. Include a session token for temporary credentials. All tables use full refresh. Create a separate source for each region.
Configuration
| Option | Description |
|---|---|
AWS access key IDType: text Required: True | |
AWS secret access keyType: password Required: True | |
AWS regionType: text Required: True | |
AWS session tokenType: password Required: False | Temporary credentials expire. Update them before the next scheduled sync. |
Linking AWS Systems Manager to PostHog
- Go to the Data pipeline page in PostHog
- Click New source and select AWS Systems Manager
- Fill in the required configuration fields
- Click Next, select the tables you want to sync, and then press Import
Supported tables
| Table | Description | Sync method | Incremental field | Primary key |
|---|---|---|---|---|
managed_instances | Managed nodes with agent, platform, and connection details. Stopped and terminated nodes are excluded. | Full refresh | — | — |
inventory | Collected AWS:InstanceInformation inventory, including stopped and terminated nodes. | Full refresh | — | — |
resource_compliance_summaries | Compliance status and severity counts for each resource and compliance type. | Full refresh | — | — |
associations | State Manager associations with schedules, targets, and execution status. | Full refresh | — | — |
patch_baselines | Patch baseline identities, operating systems, and default baseline flags. | Full refresh | — | — |
documents | SSM documents owned by you, shared with you, or provided by AWS, with types, versions, and platforms. | Full refresh | — | — |
compliance_items | Individual patch, association, and custom compliance results behind each resource compliance summary. | Full refresh | — | — |
inventory_entries | Inventory entries of every collected type except AWS:InstanceInformation, such as applications and services, for each node. | Full refresh | — | — |
association_executions | Execution history of each State Manager association, with status and resource counts by status. | Full refresh | — | — |
association_execution_targets | Status of each resource targeted by an association execution. | Full refresh | — | — |
instance_patch_states | Patch counts by state, the patch baseline, and the last patch operation for each managed node. | Full refresh | — | — |
instance_patches | Installed, missing, and failed patches on each managed node, with classification and severity. | Full refresh | — | — |
sessions | Active Session Manager sessions and sessions that ended in the past 30 days. | Full refresh | — | — |
ops_items | OpsCenter OpsItems with status, priority, severity, and planned and actual times. | Full refresh | — | — |
ops_item_events | Events that changed OpsItems, with the event source, detail, and creation time. | Full refresh | — | — |