Hey all, does anyone have any recommendations on eloquently handling getting the local administrator user and password on an EC2? I’d like to handle it securely and wanted to get some ideas. Perhaps storing the credentials AWS SSM parameter store?

There is no local admin. There's a default user..

This is for windows. This is to handle the root or admin credentials after it’s made.

Ah. No idea then. We went the other way for the few Windows computers we create. We add an AD domain group to each machine's Administrators local group. That way, we don't ever worry about getting anything out of the machine.

Ah yeah I want to join them to the domain but some of them can’t be joined. This is for an app called beyond trust. For some reason they don’t want certain servers on a domain

You may have to run a script on the target machine to do this. Maybe use userdata, and give it a script that gets the data, then pushes it to SSM Parameter Store or similar?

There is a method that lets me pull the credentials from the instance as it’s instantiated. I can just pipe that to the SSM Parma store object I make