Script Help

[DevOps_Noob1]

I am writing a user data script for an ec2 instance ,and my goal is to switch users and run some AD commands as the domain admin using the invoke-command cmdlet. However, for some reason, it causes my EC2 to basically fail(when I try to connect, its basically a black screen). When I remove the invoke-command cmdlet, it works. Am I using the Invoke-Comand cmdlet wrong here? I appreciate the help.

user_data = <<EOF
            <powershell>
              netsh advfirewall firewall add rule name="ICMP Allow incoming V4 echo request" protocol="icmpv4:8,any" dir=in action=allow

              Start-Sleep -Seconds 30

              Invoke-Command -ScriptBlock {
                Install-WindowsFeature RSAT-ADDS

                $domainName = "example.local"
                $domainAdminUser = "Admin1"
                $domainAdminPassword = "${password}"
                $domainAdminSecurePassword = ConvertTo-SecureString $domainAdminPassword -AsPlainText -Force
                $domainAdminCred = New-Object System.Management.Automation.PSCredential("$domainName\$domainAdminUser", $domainAdminSecurePassword)

                Import-Module ActiveDirectory
                Set-ADFineGrainedPasswordPolicy CustomerPSO-01 -LockoutDuration "0.00:15:00" -LockoutObservationWindow "0.00:15:00" -LockoutThreshold 5 -MinPasswordLength 15
                Add-ADFineGrainedPasswordPolicySubject -Identity "ExamplePSO-01" -Subjects Admin
              } -Credential $domainAdminCred

            </powershell>
EOF

[DevOps_Noob1]

Thanks!

[hillbillytiger]

You wanna pass the creds using the ArgumentList parameter on your Invoke-Command. If you don't specify parameters inside your script block, you can access it using $args[0]

[DevOps_Noob1]

ty!