All checks
Medium SSM · regional

SSM Automation should have CloudWatch logging enabled

Verifies that CloudWatch logging is enabled for AWS Systems Manager Automation.

service
SSM
severity
Medium
scope
evaluated in every region

How to fix it

To enable CloudWatch logging for SSM Automation, configure the service setting to send automation script output to CloudWatch Logs.

  1. Open the AWS Systems Manager console at https://console.aws.amazon.com/systems-manager/.
  2. In the navigation pane, choose Automation.
  3. Choose the Preferences tab, and then choose Edit.
  4. Select the check box next to Send output to CloudWatch Logs.
  5. For CloudWatch Logs log group, select or create a log group.
  6. Choose Save.

See which of your accounts this check is failing on.

Book a demo