AWS AMI 2026-06-18

The EC2 scope AMIs null-runtime-88 (x86) and null-runtime-arm-19 (arm64) bring back SSM Session Manager access to your instances.

Highlights

• SSM access is back. Since AWS AMI 2026-04-01, instances removed the vulnerable snap-based SSM agent on first boot and had no SSM access at runtime. On first boot, instances now install the native SSM agent package once snapd is gone and start it, so SSM Session Manager and Run Command work again without bringing back the vulnerable snap agent.

Fixes

• If your scopes run null-runtime-87 or null-runtime-arm-18, move them to these AMIs: on those, the native SSM agent was installed but never started, so instances showed as unreachable in SSM.

Upgrade

The AMIs are shared with your AWS account. Find them by name (null-runtime-88 and null-runtime-arm-19), set their IDs in ami.id of your EC2 provider, and redeploy your scopes. Each scope keeps running the previous AMI until it's redeployed. To track that rollout, see AMI drift detection.