{"id":22277,"date":"2022-06-02T11:06:54","date_gmt":"2022-06-02T02:06:54","guid":{"rendered":"https:\/\/www.skyarch.net\/blog\/?p=22277"},"modified":"2022-06-02T11:15:15","modified_gmt":"2022-06-02T02:15:15","slug":"ssm-change-calendar-%e3%81%a7-ec2-%e8%b5%b7%e5%8b%95%e5%81%9c%e6%ad%a2%e3%82%b9%e3%82%b1%e3%82%b8%e3%83%a5%e3%83%bc%e3%83%ab%e3%82%92%e7%ae%a1%e7%90%86%e3%81%97%e3%81%a6%e3%81%bf%e3%81%9f","status":"publish","type":"post","link":"https:\/\/www.skyarch.net\/blog\/ssm-change-calendar-%e3%81%a7-ec2-%e8%b5%b7%e5%8b%95%e5%81%9c%e6%ad%a2%e3%82%b9%e3%82%b1%e3%82%b8%e3%83%a5%e3%83%bc%e3%83%ab%e3%82%92%e7%ae%a1%e7%90%86%e3%81%97%e3%81%a6%e3%81%bf%e3%81%9f\/","title":{"rendered":"SSM Change Calendar \u3067 EC2 \u8d77\u52d5\u505c\u6b62\u30b9\u30b1\u30b8\u30e5\u30fc\u30eb\u3092\u7ba1\u7406\u3057\u3066\u307f\u305f"},"content":{"rendered":"

\u6982\u8981<\/h3>\n\n\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u69cb\u6210\u3092\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u3057\u3066\u3001\u30ab\u30ec\u30f3\u30c0\u30fc\u5f62\u5f0f\u3067 EC2 \u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306e\u8d77\u52d5\u505c\u6b62\u30b9\u30b1\u30b8\u30e5\u30fc\u30eb\u3092\u7ba1\u7406\u3057\u3066\u307f\u307e\u3059\u3002\n\n\"\"<\/a>\n\n

Change Calendar \u3068\u306f<\/h3>\n\nAWS Systems Manager (SSM) \u306e\u4e00\u6a5f\u80fd\u3067\u3042\u308b Change Calendar \u306f\u3001\u540c\u3058\u304f SSM \u306e Automation \u306a\u3069\u306e\u30a2\u30af\u30b7\u30e7\u30f3\u3092\u5b9f\u884c\u3067\u304d\u308b\u65e5\u6642\u3092\u30ab\u30ec\u30f3\u30c0\u30fc\u5f62\u5f0f\u3067\u7ba1\u7406\u3059\u308b\u3082\u306e\u3067\u3059\u3002\n\n\"\"<\/a>\n\n
\n\n\u4e0a\u8a18\u753b\u50cf\u306e\u30ab\u30ec\u30f3\u30c0\u30fc\u306f DEFAULT_CLOSED \u3068\u3044\u3046\u8a2d\u5b9a\u306b\u306a\u3063\u3066\u3044\u307e\u3059\u3002
\u3053\u306e\u5834\u5408\u3001\u30ab\u30ec\u30f3\u30c0\u30fc\u306b\u4e88\u5b9a(\u30a4\u30d9\u30f3\u30c8)\u3092\u4f5c\u6210\u3059\u308b\u3068\u3001\u305d\u306e\u30a4\u30d9\u30f3\u30c8\u4e2d\u306f OPEN \u3068\u3044\u3046\u30b9\u30c6\u30fc\u30bf\u30b9\u306b\u306a\u308a\u307e\u3059\u3002\n\n

\n\n\u30ab\u30ec\u30f3\u30c0\u30fc\u306e\u30b9\u30c6\u30fc\u30bf\u30b9\u304c\u5909\u66f4\u3055\u308c\u308b\u6642\u3001EventBridge \u30a4\u30d9\u30f3\u30c8\u304c\u767a\u751f\u3057\u307e\u3059\u3002
\u672c\u8a18\u4e8b\u3067\u306f\u3053\u308c\u3092\u5229\u7528\u3057\u3066 EC2 \u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306e\u8d77\u52d5\u505c\u6b62\u30b9\u30b1\u30b8\u30e5\u30fc\u30eb\u3092\u7ba1\u7406\u3057\u307e\u3059\u3002\n\n
\n\nAWS Systems ManagerChange Calendar Events<\/a>\n\n

\u6e96\u5099\u30fb\u8a2d\u5b9a<\/h3>\n\n\u4ee5\u4e0b\u306e\u3046\u3061\u3001\u30ab\u30ec\u30f3\u30c0\u30fc\u3068 EC2 \u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u3092\u4f5c\u6210\u3057\u3066\u304a\u304d\u307e\u3059\u3002\n\n\"\"<\/a>\n\n\u30ab\u30ec\u30f3\u30c0\u30fc\u306f DEFAULT_CLOSED \u3067\u4f5c\u6210\u3057\u307e\u3059\u3002\n\n\"\"<\/a>\n\n
\n\n\u30ab\u30ec\u30f3\u30c0\u30fc\u3068\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u3092\u4f5c\u6210\u3057\u305f\u3089\u3001\u4ee5\u4e0b\u306e CloudFormation \u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u3092\u30c7\u30d7\u30ed\u30a4\u3057\u307e\u3059\u3002\n\n
AWSTemplateFormatVersion: 2010-09-09\n\nParameters: \n  Prefix:\n    Type: String\n  InstanceId:\n    Type: AWS::EC2::Instance::Id\n  CalendarName:\n    Type: String\n\nResources:\n  StartEventsRule:\n    Type: AWS::Events::Rule\n    Properties:\n      Name: !Sub ${Prefix}-start-rule\n      EventPattern:\n        source:\n          - aws.ssm\n        detail-type:\n          - Calendar State Change\n        resources:\n          - !Sub arn:aws:ssm:${AWS::Region}:${AWS::AccountId}:document\/${CalendarName}\n        detail:\n          state:\n            - OPEN\n      State: ENABLED\n      Targets:\n        - Id: AWS-StartEC2Instance\n          Arn: !Sub arn:aws:ssm:${AWS::Region}::automation-definition\/AWS-StartEC2Instance:$DEFAULT\n          RoleArn: !GetAtt EventsRole.Arn\n          Input: !Sub \"{\\\"InstanceId\\\":[\\\"${InstanceId}\\\"]}\"\n          DeadLetterConfig:\n            Arn: !GetAtt DLQueue.Arn\n\n  StopEventsRule:\n    Type: AWS::Events::Rule\n    Properties:\n      Name: !Sub ${Prefix}-stop-rule\n      EventPattern:\n        source:\n          - aws.ssm\n        detail-type:\n          - Calendar State Change\n        resources:\n          - !Sub arn:aws:ssm:${AWS::Region}:${AWS::AccountId}:document\/${CalendarName}\n        detail:\n          state:\n            - CLOSED\n      State: ENABLED\n      Targets:\n        - Id: AWS-StopEC2Instance\n          Arn: !Sub arn:aws:ssm:${AWS::Region}::automation-definition\/AWS-StopEC2Instance:$DEFAULT\n          RoleArn: !GetAtt EventsRole.Arn\n          Input: !Sub \"{\\\"InstanceId\\\":[\\\"${InstanceId}\\\"]}\"\n          DeadLetterConfig:\n            Arn: !GetAtt DLQueue.Arn\n\n  EventsRole:    \n    Type: AWS::IAM::Role\n    Properties: \n      RoleName: !Sub ${Prefix}-events-role\n      AssumeRolePolicyDocument:\n        Version: 2012-10-17\n        Statement:\n          - Effect: Allow\n            Principal:\n              Service:\n                - events.amazonaws.com\n            Action: sts:AssumeRole\n      Policies:\n        - PolicyName: policy\n          PolicyDocument:\n            Version: 2012-10-17\n            Statement:\n              - Effect: Allow\n                Action: ssm:StartAutomationExecution\n                Resource:\n                  - !Sub arn:aws:ssm:${AWS::Region}::automation-definition\/AWS-StartEC2Instance:$DEFAULT\n                  - !Sub arn:aws:ssm:${AWS::Region}::automation-definition\/AWS-StopEC2Instance:$DEFAULT\n              - Effect: Allow\n                Action:\n                  - ec2:StartInstances\n                  - ec2:StopInstances\n                Resource: !Sub arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:instance\/${InstanceId}\n              - Effect: Allow\n                Action: ec2:DescribeInstanceStatus\n                Resource: \"*\"\n\n  DLQueue:\n    Type: AWS::SQS::Queue\n    Properties:\n      QueueName: !Sub ${Prefix}-dlqueue\n\n  QueuePolicy:\n    Type: AWS::SQS::QueuePolicy\n    Properties:\n      PolicyDocument:\n        Statement:\n          - Effect: Allow\n            Principal:\n              Service: events.amazonaws.com\n            Action: SQS:SendMessage\n            Resource: !GetAtt DLQueue.Arn\n      Queues:\n        - !Ref DLQueue\n<\/pre>\n\n\u6b21\u306b\u3001\u30ab\u30ec\u30f3\u30c0\u30fc\u306b\u4e88\u5b9a(\u30a4\u30d9\u30f3\u30c8)\u3092\u4f5c\u6210\u3057\u307e\u3059\u3002\n\n\"\"<\/a>\n\n
\n\n\u30a4\u30d9\u30f3\u30c8\u958b\u59cb\u6642(\u30ab\u30ec\u30f3\u30c0\u30fc\u304c OPEN \u306b\u306a\u3063\u305f\u6642)\u3001\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u304c\u8d77\u52d5\u3055\u308c\u307e\u3059\u3002
\u9006\u306b\u30a4\u30d9\u30f3\u30c8\u7d42\u4e86\u6642(\u30ab\u30ec\u30f3\u30c0\u30fc\u304c CLOSED \u306b\u306a\u3063\u305f\u6642)\u306f\u3001\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u304c\u505c\u6b62\u3055\u308c\u307e\u3059\u3002
\u3064\u307e\u308a\u3001\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u3092\u7a3c\u50cd\u3055\u305b\u3066\u304a\u304d\u305f\u3044\u6642\u9593\u5e2f\u3092\u4e88\u5b9a(\u30a4\u30d9\u30f3\u30c8)\u3068\u3057\u3066\u767b\u9332\u3057\u3066\u304a\u304f\u3001\u3068\u3044\u3046\u4f7f\u3044\u65b9\u306b\u306a\u3063\u3066\u3044\u307e\u3059\u3002
\u203bChange Calendar \u306e\u4ed5\u69d8\u3067\u958b\u59cb\uff5e\u7d42\u4e86\u307e\u30675\u5206\u4ee5\u4e0a\u7a7a\u3051\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002\n\n\"\"<\/a>\n\n
\u52d5\u4f5c\u78ba\u8a8d<\/h3>\n\n\u30ab\u30ec\u30f3\u30c0\u30fc\u306b\u767b\u9332\u3057\u305f\u30a4\u30d9\u30f3\u30c8\u901a\u308a\u306b\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u304c\u8d77\u52d5\u30fb\u505c\u6b62\u3055\u308c\u3066\u3044\u308b\u304b\u78ba\u8a8d\u3057\u3066\u307f\u307e\u3057\u3087\u3046\u3002
\u307e\u305f\u3001SSM Automation \u30b3\u30f3\u30bd\u30fc\u30eb\u304b\u3089\u8d77\u52d5\u30fb\u505c\u6b62\u306e\u5b9f\u884c\u5c65\u6b74\u3092\u78ba\u8a8d\u3059\u308b\u3053\u3068\u304c\u51fa\u6765\u307e\u3059\u3002\n\n\"\"<\/a>\n\n
\u88dc\u8db3<\/h3>\n\n
EventBridge \u3067\u6307\u5b9a\u3059\u308b\u30ea\u30bd\u30fc\u30b9ARN<\/h4>\n\nCloudFormation \u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u306e AWS::Events::Rule \u306e EventPattern \u3092\u898b\u308b\u3068\u3001resources \u306b SSM \u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u306e ARN \u304c\u6307\u5b9a\u3055\u308c\u3066\u307e\u3059\u3002
Change Calendar \u306e\u30a4\u30d9\u30f3\u30c8\u306a\u306e\u3067\u3001\u6700\u521d\u306f \"arn:aws:ssm:${AWS::Region}:${AWS::AccountId}:calendar<\/strong>\/${CalendarName}\" \u306e\u3088\u3046\u306b\u306a\u308b\u3068\u601d\u3063\u3066\u3044\u305f\u306e\u3067\u3059\u304c\u9055\u3044\u307e\u3057\u305f\u3002\n\n
source:\n  - aws.ssm\ndetail-type:\n  - Calendar State Change\nresources:\n  - !Sub arn:aws:ssm:${AWS::Region}:${AWS::AccountId}:document\/${CalendarName}\ndetail:\n  state:\n    - OPEN\n<\/pre>\n\n\u4ee5\u4e0b\u306b\u7b54\u3048\u304c\u3042\u308a\u307e\u3057\u305f\u3002\n\n
\n\nAWS Systems Manager Change Calendar<\/a>\n\n
\nChange Calendar \u30a8\u30f3\u30c8\u30ea\u3092\u4f5c\u6210\u3059\u308b\u3068\u3001ChangeCalendar<\/code>\u00a0\u30bf\u30a4\u30d7\u306e\u00a0Systems Manager \u30c9\u30ad\u30e5\u30e1\u30f3\u30c8<\/a>\u304c\u4f5c\u6210\u3055\u308c\u307e\u3059\u3002\n<\/blockquote>\n\n\n\n\u3053\u306eSSM\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u306f\u30de\u30cd\u30b8\u30e1\u30f3\u30c8\u30b3\u30f3\u30bd\u30fc\u30eb\u4e0a\u3067\u306f\u78ba\u8a8d\u3067\u304d\u307e\u305b\u3093\u3067\u3057\u305f\u304c\u3001CLI \u304b\u3089\u53c2\u7167\u3059\u308b\u3053\u3068\u306f\u51fa\u6765\u307e\u3057\u305f\u3002\n\n
$ aws ssm describe-document --name StartStopScheduler\n{\n    \"Document\": {\n        \"Hash\": \"xxxxxxxxxx\",\n        \"HashType\": \"Sha256\",\n        \"Name\": \"StartStopScheduler\",\n        \"Owner\": \"111122223333\",\n        \"CreatedDate\": \"2022-05-31T03:29:05.315000+00:00\",\n        \"Status\": \"Active\",\n        \"DocumentVersion\": \"17\",\n        \"Description\": \"\",\n        \"PlatformTypes\": [],\n        \"DocumentType\": \"ChangeCalendar\",\n        \"LatestVersion\": \"17\",\n        \"DefaultVersion\": \"17\",\n        \"DocumentFormat\": \"TEXT\",\n        \"Tags\": [],\n        \"Category\": [],\n        \"CategoryEnum\": []\n    }\n}\n<\/pre>\n\n
SQS \u306b\u3064\u3044\u3066<\/h4>\n\n\u4eca\u56de\u306e CloudFormation \u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u306b\u306f\u3001EventBridge + SSM Automation \u306e\u5b9f\u884c\u304c\u5931\u6557\u3057\u305f\u5834\u5408\u306e\u30c7\u30c3\u30c9\u30ec\u30bf\u30fc\u30ad\u30e5\u30fc(SQS)\u3092\u8a2d\u5b9a\u3057\u3066\u3044\u307e\u3057\u305f\u3002\n\n\"\"<\/a>\n\nEventBridge + SSM Automation \u3092\u8a2d\u5b9a\u3057\u305f\u5834\u5408\u306e\u56f0\u308a\u3054\u3068\u306e1\u3064\u304c\u3001Automation \u306e\u5b9f\u884c\u3067\u304d\u306a\u304b\u3063\u305f\u5834\u5408\u306e\u30c8\u30e9\u30d6\u30eb\u30b7\u30e5\u30fc\u30c6\u30a3\u30f3\u30b0\u3067\u3059\u3002
\u30a4\u30d9\u30f3\u30c8\u30d1\u30bf\u30fc\u30f3\u306b\u8a72\u5f53\u3059\u308b\u30a4\u30d9\u30f3\u30c8\u304c\u767a\u751f\u3057\u305f\u306e\u306b Automation \u304c\u5b9f\u884c\u3055\u308c\u306a\u3044\u3088\u3046\u306a\u5834\u5408\u3001\u305d\u306e\u5931\u6557\u539f\u56e0\u3092\u793a\u3059\u30ed\u30b0\u304c\u898b\u5f53\u305f\u308a\u307e\u305b\u3093\u3002\n\n

\n\n\u3067\u3059\u304c Automation \u304c\u5931\u6557\u3057\u305f\u5834\u5408\u306e\u30c7\u30c3\u30c9\u30ec\u30bf\u30fc\u30ad\u30e5\u30fc\u3092\u8a2d\u5b9a\u3057\u3066\u304a\u304f\u3068\u3001\u305d\u306e\u3042\u305f\u308a\u306e\u30c8\u30e9\u30d6\u30eb\u30b7\u30e5\u30fc\u30c6\u30a3\u30f3\u30b0\u304c\u5bb9\u6613\u306b\u306a\u308a\u307e\u3059\u3002
Automation \u304c\u5b9f\u884c\u3067\u304d\u306a\u304b\u3063\u305f\u969b\u3001\u305d\u306e\u30a4\u30d9\u30f3\u30c8\u304c\u8a2d\u5b9a\u3057\u305f\u30ad\u30e5\u30fc(SQS)\u306b\u30e1\u30c3\u30bb\u30fc\u30b8\u30f3\u30b0\u3055\u308c\u307e\u3059\u304c\u3001\u305d\u306e\u30e1\u30c3\u30bb\u30fc\u30b8\u306e\u5c5e\u6027\u306b\u6709\u7528\u306a ERROR_MESSAGE \u304c\u8a18\u8f09\u3055\u308c\u3066\u3044\u307e\u3059\u3002\n\n\"\"<\/a>\n\n","protected":false},"excerpt":{"rendered":"
\u6982\u8981 \u4ee5\u4e0b\u306e\u3088\u3046\u306a\u69cb\u6210\u3092\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u3057\u3066\u3001\u30ab\u30ec\u30f3\u30c0\u30fc\u5f62\u5f0f\u3067 EC2 \u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306e\u8d77\u52d5\u505c\u6b62\u30b9\u30b1\u30b8\u30e5\u30fc\u30eb\u3092\u7ba1\u7406\u3057\u3066\u307f\u307e\u3059\u3002 Change Calendar \u3068\u306f AWS Systems Manager (SSM) \u306e\u4e00\u6a5f\u80fd…<\/p>\n","protected":false},"author":60,"featured_media":22292,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_locale":"ja","_original_post":"https:\/\/www.skyarch.net\/blog\/?p=22277","footnotes":""},"categories":[20,830],"tags":[102,370],"class_list":{"0":"post-22277","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-aws","8":"category-systems-manager","9":"tag-aws","10":"tag-aws-systems-manager","11":"ja"},"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.skyarch.net\/blog\/wp-json\/wp\/v2\/posts\/22277","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.skyarch.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.skyarch.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.skyarch.net\/blog\/wp-json\/wp\/v2\/users\/60"}],"replies":[{"embeddable":true,"href":"https:\/\/www.skyarch.net\/blog\/wp-json\/wp\/v2\/comments?post=22277"}],"version-history":[{"count":34,"href":"https:\/\/www.skyarch.net\/blog\/wp-json\/wp\/v2\/posts\/22277\/revisions"}],"predecessor-version":[{"id":22353,"href":"https:\/\/www.skyarch.net\/blog\/wp-json\/wp\/v2\/posts\/22277\/revisions\/22353"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.skyarch.net\/blog\/wp-json\/wp\/v2\/media\/22292"}],"wp:attachment":[{"href":"https:\/\/www.skyarch.net\/blog\/wp-json\/wp\/v2\/media?parent=22277"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.skyarch.net\/blog\/wp-json\/wp\/v2\/categories?post=22277"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.skyarch.net\/blog\/wp-json\/wp\/v2\/tags?post=22277"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}