Install the SSM Agent on Amazon EKS Worker nodes using preBootstrapCommands

The SSM Agent on EKS Worker Nodes Template is a Cloudairy architecture template that helps you set up your Amazon EKS worker nodes with SSM Agent and CloudWatch Agent right from the start. The secret sauce? It uses preBootstrap Commands, which are special commands that run automatically when an EC2 instance (in this case, an EKS worker node) boots up. 
 

With these commands baked into your node configuration, your agents get installed and configured the moment a node launches — saving you time and ensuring consistency across your cluster. 
 

In simple terms: This is a shortcut to better visibility, better security, and smoother operations in your Kubernetes environment. 
 

Why You’ll Love Using This ?

• No more SSH headaches : The SSM Agent lets you access and manage your nodes without SSH. No need to open ports, manage keys, or expose anything unnecessarily. 

• Monitoring that just works : The CloudWatch Agent starts collecting logs and metrics from the moment your node boots. You get observability out of the box. 

• Automated setup, consistent results : With preBootstrapCommands, the setup runs the same way every time. No more missed installations or out-of-sync nodes. 

• Stronger security posture : Everything runs inside AWS’s Systems Manager — no need to expose your nodes to the internet just to troubleshoot them. 

• Less firefighting, more focusing : With logs, metrics, and alerts all set up from the start, you catch issues early — and fix them faster. 
   

Who Should Use This and When? 

This setup is perfect for: 

• DevOps engineers manage EKS clusters at scale. 

• Platform teams setting up secure, automated environments. 

• Anyone who’s tired of logging into nodes just to install agents or dig through logs. 

You’ll want to use this template when: 

• You’re launching a new EKS cluster and want remote access and monitoring built in. 

• You’re standardizing infrastructure across multiple environments (dev, test, prod). 

• You want better security by avoiding SSH completely. 

• You're setting up alerts and dashboards and need consistent, real-time data across all worker nodes. 
   

What You’ll Get Inside the Template ?

The SSM Agent on EKS Worker Nodes template includes a bunch of useful components that work together to make your monitoring and access setup reliable and repeatable: 

• Amazon EKS – Your Kubernetes control plane and cluster management. 

• Worker Nodes – Where your containers run, and where the agents will be installed. 

• SSM Agent – Gives you secure, SSH-free access to nodes via AWS Systems Manager. 

• CloudWatch Agent – Collects and ships logs, metrics, and other performance data. 

• preBootstrapCommands – Automatically installs and configures both agents on every new node. 

• IAM Roles – Grants the right permissions to the SSM and CloudWatch agents. 

• AWS Systems Manager – Central hub for running commands and managing nodes securely. 

• Amazon CloudWatch – For log collection, metrics, and dashboards. 

• VPC and Security Groups – Keep your network locked down and secure. 

• Auto Scaling Group – Dynamically adjusts the number of worker nodes as needed. 

• Log Streams – Organizes your monitoring data by source. 

• Metrics Dashboard – Gives you a visual overview of what’s happening in your cluster. 

• Amazon SNS – Sends alerts if something breaks or a threshold is crossed. 

• EventBridge Rules – Lets you automate actions based on certain events — like restarting a pod or notifying a team. 
   

How to Use This Template ?

Here’s how you get started using this in Cloudairy: 

1. Log into your Cloudairy account : If you’re new, it’s free to sign up and start exploring. 

2. Head to the Templates Library : You’ll find a bunch of templates, but search specifically for: 
   “SSM Agent on EKS Worker Nodes” 

3. Click to open the template : Look around — get familiar with how the components are laid out. 

4. Select ‘Import’ to add it to your workspace : Now it’s yours to customize and use. 

5. Enable preBootstrapCommands in the node configuration : These commands will handle the automatic agent installation. 

6. Configure IAM roles and permissions : Make sure your agents have access to Systems Manager and CloudWatch. 

7. Customize the monitoring settings : Adjust log paths, namespaces, or any specific metrics you want to track. 

8. Deploy the template : Launch your worker nodes and watch everything fall into place — no manual installation needed. 

9. Test it : Use Systems Manager Session Manager to log in to a node. Check CloudWatch to see logs flowing in. Boom — you're set. 
    

Summary  

Setting up remote access and monitoring on EKS doesn’t have to be a grind. The SSM Agent on EKS Worker Nodes template saves you time, boosts your security, and helps you manage your Kubernetes worker nodes more efficiently — right from the moment they launch. 
 

If you’re tired of the SSH dance and juggling log setups manually, this template is your shortcut to a cleaner, smarter EKS environment. Whether you’re running a small dev cluster or a massive production setup, you’ll appreciate the automation, consistency, and peace of mind it brings.