Deploy Amazon SSM Agent to Microsoft Intune
Amazon Web ServicesWindowsversion 3.3.5226.0, 20 August 2026
Amazon SSM Agent is in the PatchBee catalog as a Windows app from Amazon Web Services, synced from the Windows Package Manager community repository (winget). Pick it in the App Library and PatchBee writes the deployment plan below, builds the package, publishes it to your Intune tenant and assigns it to the Entra groups you choose. New versions then follow through your update rings.
The plan PatchBee writes
Amazon SSM Agent as an Intune app
The standard form for a WiX Burn bundle (x64, per machine). The real plan is generated from the installer when you package, and shown in full before anything is published; every field can be changed.
- Intune app type
- Windows app (Win32), .intunewin
- Install
- "AmazonSSMAgent.exe" /quiet /norestart
- Uninstall
- "AmazonSSMAgent.exe" /uninstall /quiet /norestart
- Detection
- Registry: the bundle's uninstall key. Uninstall key {a9ea3568-38f6-47de-bd01-d1861cb43810}, BundleVersion 3.3.5226.0 or newer.
- Requirements
- x64 · per machine
Installers in version 3.3.5226.0
| Architecture | Type | Scope | Hash |
|---|---|---|---|
| x64 | WiX Burn bundle | per machine | SHA-256 published |
PatchBee downloads the installer from the publisher's own URL and verifies its SHA-256 against the catalog before packaging. "None published" means the source carries no hash for this download, so that check has nothing to compare against; packaging still works.
About Amazon SSM Agent
AWS Systems Manager Agent (SSM Agent) is Amazon software that runs on Amazon Elastic Compute Cloud (Amazon EC2) instances, edge devices, on-premises servers, and virtual machines (VMs). SSM Agent makes it possible for Systems Manager to update, manage, and configure these resources. The agent processes requests from the Systems Manager service in the AWS Cloud, and then runs them as specified in the request. SSM Agent then sends status and execution information back to the Systems Manager service by using the Amazon Message Gateway Service (ssmmessages). (In AWS Regions launched before 2024, status and execution information might also be sent back by the Amazon Message Delivery Service (service prefix: ec2messages).)
If you monitor traffic, you will see that your managed nodes communicate with ssmmessages.* endpoints and possibly ec2messages.* endpoints. For more information, see Reference: ec2messages, ssmmessages, and other API operations. For information about porting SSM Agent logs to Amazon CloudWatch Logs, see Logging and monitoring in AWS Systems Manager.
- Publisher
- Amazon Web Services
- License
- Apache-2.0
- Source
- winget · Amazon.SSMAgent
- Versions in catalog
- 18
How this becomes an app in your tenant
Sign in with your Microsoft work account and connect your Intune tenant once. Find Amazon SSM Agent in the App Library, open its plan (the commands, detection rule and requirements above, editable) and publish: PatchBee downloads and verifies the installer, builds the package, creates the Intune app and assigns your groups. When Amazon Web Services ships a new version, PatchBee detects it and rolls it out through your rings, with supersedence and rollback.
Read the step-by-step guideMore Windows apps
Catalog data as of 11 October 2026, from the Windows Package Manager community repository (winget). The product re-reads the source every night and plans against the live catalog, so the version here may already be one behind. Nothing is published to a tenant without an administrator approving the plan.