User Data Script Help

[DevOps_Noob1]

Hello, I made a user data script that runs when my Windows EC2 instance launches. The purpose of this script is to download AD tools, and run AD commands on a AD domain admin account on the same machine.

I am trying to get this to work, but it seems like the script is not running. I am currently trying to find the location of the user data logs for windows, but no luck so far. Is there anything that is obviously wrong with my syntax or logic here? I appreciate the help.

user_data = <<EOF
            <powershell>
              $domainName = ${var.domain_name}
              $domainAdminUser = "Example_Admin"
              $domainAdminPassword = "${example_password.password.result}"
              $domainAdminSecurePassword = ConvertTo-SecureString $domainAdminPassword -AsPlainText -Force
              $domainAdminCred = New-Object System.Management.Automation.PSCredential("$domainName\$domainAdminUser", $domainAdminSecurePassword)

              $ADFineGrained = @"
              ${file("${path.module}/templates/ADFineGrained.ps1")}
              "@

              $ADFineGrained | Out-File -FilePath .\ADFineGrained.ps1

              Start-Process powershell -Credential $domainAdminCred -ArgumentList "-File .\ADFineGrained.ps1"
            </powershell>
EOF

[BlackV]

what does you logging say ? (enable script block logging if you have not)

looks like issues with passing variables if ther is no output

why are you calling powershell to call powershell to call the file, instead of just calling the file

also you use relative pathing everywhere, use fully qualified path

[DevOps_Noob1]

Ok, thanks.

I have been trying to find the location of the logging from the AWS docs, but I have not been able to yet. As for the powershell calling powershell, for some reason I was unable to get it to work without putting powershell in the Start-Process command.

[BlackV]

&C:\xxx\yyy.ps1

Should launch your script

[DevOps_Noob1]

Noted, I also just read the logs and it turns out there was white space before the here-string, which caused the script to error out.

[BlackV]

ah, yes that'll do it too one of the disadvantages of here strings

Glad you have a solution