aws ssm start-automation-execution not accepting taget filtering by multiple tags

[RoshmiB]

Describe the bug

While running this command:-
aws --region us-west-2 ssm start-automation-execution
--document-name "AWS-ResizeInstance"
--parameters "InstanceType=t3a.small,AutomationAssumeRole=arn:aws:iam::<master_acc_id>:role/AWS-SystemsManager-AutomationAdministrationRole"
--target-parameter-name InstanceId
--targets Key=tag:MaintenanceDays,Values=30,127 Key=tag:MaintenanceTimeStart,Values=12
--target-locations Accounts=<target_acc_id>,Regions=us-west-2,us-east-2,ExecutionRoleName=AWS-SystemsManager-AutomationExecutionRole

Expected Behavior

It should run successfully

Current Behavior

It is throwing error :- botocore.errorfactory.InvalidAutomationExecutionParametersException: An error occurred (InvalidAutomationExecutionParametersException) when calling the StartAutomationExecution operation: Only one resource group or tag can be specified at a time

Reproduction Steps

run this command:-
aws --region us-west-2 ssm start-automation-execution
--document-name "AWS-ResizeInstance"
--parameters "InstanceType=t3a.small,AutomationAssumeRole=arn:aws:iam::<master_acc_id>:role/AWS-SystemsManager-AutomationAdministrationRole"
--target-parameter-name InstanceId
--targets Key=tag:MaintenanceDays,Values=30,127 Key=tag:MaintenanceTimeStart,Values=12
--target-locations Accounts=<target_acc_id>,Regions=us-west-2,us-east-2,ExecutionRoleName=AWS-SystemsManager-AutomationExecutionRole

Possible Solution

No response

Additional Information/Context

No response

CLI version used

aws-cli/2.15.36 Python/3.11.8 Linux/5.15.146.1-microsoft-standard-WSL2 exe/x86_64.ubuntu.22 prompt/off

Environment details (OS name and version, etc.)

Ubuntu 22.04.4 LTS

[tim-finnigan]

Hi @RoshmiB thanks for reaching out. The start-automation-execution command corresponds to the StartAutomationExecution API. Therefore the parameter validation is set by the service team. Here is the Target API documentation showing supported formats for reference.

The SSM User Guide does have a section on targeting multiple managed nodes, where it shows send-command as supporting multiple tags. So I'm not sure if start-automation-execution is designed to not support multiple tags, or maybe this is something that needs to be clarified in the documentation.

Since this issue involves a service API which is used across the CLI/SDKs, I'm going to transfer it to our cross-SDK repository. I'll also reach out to the service team to try to get more information. (ref: P138676805)

Update - transferred back to original repository for continued tracking.