<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Rhys | Senior Cloud Infrastructure Engineer</title>
    <description>The latest articles on DEV Community by Rhys | Senior Cloud Infrastructure Engineer (@rhysmcneill).</description>
    <link>https://dev.to/rhysmcneill</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3899076%2F97ca7b9c-9b8f-48cd-b160-f2027ad528ba.png</url>
      <title>DEV Community: Rhys | Senior Cloud Infrastructure Engineer</title>
      <link>https://dev.to/rhysmcneill</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/rhysmcneill"/>
    <language>en</language>
    <item>
      <title>I built ssmctl because AWS SSM deserved a better user experience</title>
      <dc:creator>Rhys | Senior Cloud Infrastructure Engineer</dc:creator>
      <pubDate>Sun, 26 Apr 2026 17:00:37 +0000</pubDate>
      <link>https://dev.to/rhysmcneill/i-built-ssmctl-because-aws-ssm-deserved-a-better-user-experience-29e6</link>
      <guid>https://dev.to/rhysmcneill/i-built-ssmctl-because-aws-ssm-deserved-a-better-user-experience-29e6</guid>
      <description>&lt;blockquote&gt;
&lt;p&gt;Github: &lt;a href="//github.com/rhysmcneill/ssmctl"&gt;github.com/rhysmcneill/ssmctl&lt;/a&gt;&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;I use AWS Session Manager a lot. No bastion hosts, no open ports, full CloudTrail audit trail — it's the right way to access EC2 instances. But every time I sat down to use it I found myself Googling the same commands, copy-pasting instance IDs from the console, and generally fighting the tooling more than getting work done.&lt;/p&gt;

&lt;p&gt;The native experience looks like this:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;aws ssm start-session &lt;span class="nt"&gt;--target&lt;/span&gt; i-0123456789abcdef0
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;And running a remote command means constructing a JSON document, calling send-command, then polling get-command-invocation for the output. There's no built-in file transfer at all.&lt;/p&gt;

&lt;p&gt;I got fed up and built &lt;code&gt;ssmctl&lt;/code&gt;. It is a thin CLI wrapper that gives SSM the same interface as ssh and scp, the commands I already know by heart.&lt;/p&gt;

&lt;h2&gt;
  
  
  What it does
&lt;/h2&gt;



&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;&lt;span class="c"&gt;# open an interactive shell&lt;/span&gt;
ssmctl connect web-1

&lt;span class="c"&gt;# run a command&lt;/span&gt;
ssmctl run web-1 &lt;span class="nt"&gt;--&lt;/span&gt; &lt;span class="nb"&gt;uname&lt;/span&gt; &lt;span class="nt"&gt;-a&lt;/span&gt;

&lt;span class="c"&gt;# upload a file&lt;/span&gt;
ssmctl &lt;span class="nb"&gt;cp&lt;/span&gt; ./config.json web-1:/tmp/config.json

&lt;span class="c"&gt;# download a file&lt;/span&gt;
ssmctl &lt;span class="nb"&gt;cp &lt;/span&gt;web-1:/var/log/app.log ./app.log
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;Targets can be an instance ID or an EC2 Name tag — so &lt;code&gt;web-1&lt;/code&gt; just works without having to look up the ID first.&lt;/p&gt;

&lt;p&gt;It uses whatever AWS credentials you already have configured (env vars, &lt;code&gt;~/.aws/credentials&lt;/code&gt; etc). Nothing new to set up.&lt;/p&gt;

&lt;h2&gt;
  
  
  Why I built it in Go
&lt;/h2&gt;

&lt;p&gt;It made sense for a single binary CLI tool — easy to cross-compile, easy to distribute via Homebrew or a direct download, no runtime dependency to manage on the user's machine.&lt;/p&gt;

&lt;h2&gt;
  
  
  Install
&lt;/h2&gt;

&lt;p&gt;&lt;strong&gt;Homebrew&lt;/strong&gt;&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;brew tap rhysmcneill/ssmctl
brew &lt;span class="nb"&gt;install &lt;/span&gt;ssmctl
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;&lt;strong&gt;or grab a binary from the releases page&lt;/strong&gt;&lt;br&gt;
Binaries for Linux, macOS (Intel + Apple Silicon), and Windows are on the releases page.&lt;/p&gt;

&lt;h2&gt;
  
  
  What is next for &lt;code&gt;ssmctl&lt;/code&gt;?
&lt;/h2&gt;

&lt;p&gt;It covers my day-to-day SSM workflow. Shell completions and JSON output for run/cp are on the roadmap, amongst a lot of other open issues (feel free to jump in if you are comfortable, we have a very open community contributing). If you use SSM regularly and have things you'd want it to do, open an issue — I'm genuinely interested in what would be useful.&lt;/p&gt;

</description>
      <category>aws</category>
      <category>devops</category>
      <category>opensource</category>
      <category>go</category>
    </item>
  </channel>
</rss>
