Creates a System Integrity Protection (SIP) modification task to configure the SIP settings for an x86 Mac instance or Apple silicon Mac instance

Creates a System Integrity Protection (SIP) modification task to configure the SIP settings for an x86 Mac instance or Apple silicon Mac instance. For more information, see Configure SIP for Amazon EC2 instances in the Amazon EC2 User Guide.

See https://www.paws-r-sdk.com/docs/ec2_create_mac_system_integrity_protection_modification_task/ for full documentation.

Usage

ec2_create_mac_system_integrity_protection_modification_task(
  ClientToken = NULL,
  DryRun = NULL,
  InstanceId,
  MacCredentials = NULL,
  MacSystemIntegrityProtectionConfiguration = NULL,
  MacSystemIntegrityProtectionStatus,
  TagSpecifications = NULL
)

Arguments

ClientToken

Unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information, see Ensuring Idempotency.

DryRun

Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.

InstanceId

[required] The ID of the Amazon EC2 Mac instance.

MacCredentials

[Apple silicon Mac instances only] Specifies the following credentials:

• Internal disk administrative user

  • Username - Only the default administrative user (aws-managed-user) is supported and it is used by default. You can't specify a different administrative user.

  • Password - If you did not change the default password for aws-managed-user, specify the default password, which is blank. Otherwise, specify your password.

• Amazon EBS root volume administrative user

  • Username - If you did not change the default administrative user, specify ec2-user. Otherwise, specify the username for your administrative user.

  • Password - Specify the password for the administrative user.

The credentials must be specified in the following JSON format:

{ "internalDiskPassword":"internal-disk-admin_password", "rootVolumeUsername":"root-volume-admin_username", "rootVolumepassword":"root-volume-admin_password" }

MacSystemIntegrityProtectionConfiguration

Specifies the overrides to selectively enable or disable individual SIP settings. The individual settings you specify here override the overall SIP status you specify for MacSystemIntegrityProtectionStatus.

MacSystemIntegrityProtectionStatus

[required] Specifies the overall SIP status for the instance. To enable all SIP settings, specify enabled. To disable all SIP settings, specify disabled.

TagSpecifications

Specifies tags to apply to the SIP modification task.