runner.ec2-vm-ssm-preflight

Validate STS identity and SSM RunCommand prerequisites for EC2 VM runners

Check that a CloudConnection can use STS and SSM for runner VMs.

Overview

Property	Value
Workflow type	Linear
Library	App-runners-aws
Version	1.0

Input Schema

Field	Type	Required	Default	Description
connection_uuid	uuid	Yes	—	UUID of the CloudConnection used by this workflow, picked from the organization's connections, narrowed to AWS connections since this workflow only operates on EC2 VM runners.
region	string	Yes	—	—
instance_ids	json	No	—	—
run_command_check	boolean	No	—	—
organization_uuid	uuid	No	—	UUID of the caller's organization, injected server-side from the authenticated request; scopes the operation to the correct tenant.

Output Schema

Field	Type	Required	Default	Description
connection_uuid	uuid	No	—	UUID of the CloudConnection used by this workflow, echoed from input; picked from the organization's AWS-scoped connections.
region	string	No	—	—
caller_identity	json	No	—	—
managed_instance_ids	json	No	—	—
send_command_ref	string	No	—	—
ready	boolean	No	—	—
checks	json	No	—	—
completed_at	string	No	—	—
failed_at	string	No	—	—
failure_reason	string	No	—	—
error	string	No	—	—
error_type	string	No	—	—
failed_at_state	string	No	—	—
failed_layer	json	No	—	—
failed_step	json	No	—	—

States

State	Initial	Terminal	Success	Auto-advance	Description
pending	Yes	No	—	check	—
checking	No	No	—	complete	—
completed	No	Yes	Yes	—	—
failed	No	Yes	No	—	—

State Diagram

Transitions

From	Action	To	Description
pending	check	checking	—
checking	complete	completed	—
* (any state)	fail	failed	—

API Usage

POST /api/workflows/start
Content-Type: application/json

{
  "workflow_type": "runner.ec2-vm-ssm-preflight",
  "initial_data": {
    "connection_uuid": "value",
    "region": "value"
  }
}