{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/aws-ssm-run-command-error-threshold-concurrency/", "item": { "id": "https://update.dsesecurity.com/updates/aws-ssm-run-command-error-threshold-concurrency/", "slug": "aws-ssm-run-command-error-threshold-concurrency", "url": "https://update.dsesecurity.com/updates/aws-ssm-run-command-error-threshold-concurrency/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/aws-ssm-run-command-error-threshold-concurrency.md", "json": "https://update.dsesecurity.com/api/v1/posts/aws-ssm-run-command-error-threshold-concurrency/" }, "title": "Pair Run Command error limits with concurrency before a fleet rollout", "summary": "Stopping further dispatch does not stop commands already executing on managed nodes.", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "continuity-recovery", "label": "Continuity & recovery", "alt": "Paired infrastructure paths converging on a stable recovered service.", "card_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "business-continuity", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "slug": "cybersecurity", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-10-20T18:14:05+00:00", "modified_at": "2026-10-20T18:34:30+00:00", "reviewed_on": "2026-10-20", "reading_minutes": 2, "word_count": 274, "potentially_affected": "This describes Run Command fleet dispatch behavior. It is not an application rollback mechanism and does not describe Patch now concurrency defaults or every Automation control.", "dse_recommendation": "DSE recommends treating both settings as part of the approved change.", "primary_source": { "name": "AWS — Run commands at scale", "url": "https://docs.aws.amazon.com/systems-manager/latest/userguide/send-commands-multiple.html", "published_on": null, "authority": "docs.aws.amazon.com" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Stopping further dispatch does not stop commands already executing on managed nodes.

\n

Source facts

\n

Systems Manager Run Command accepts max-concurrency and max-errors as separate controls. The error limit stops dispatch to additional managed nodes after the allowed error count is exceeded. Commands already running are allowed to complete and may also fail. AWS advises concurrency of one when strict sequential failure control is required. The documented default for max-errors is zero, which stops additional dispatch after the first returned error.

\n

Source: AWS — Run commands at scale.

\n

Applicability

\n

This describes Run Command fleet dispatch behavior. It is not an application rollback mechanism and does not describe Patch now concurrency defaults or every Automation control.

\n

DSE recommendation

\n

DSE recommends treating both settings as part of the approved change. Start with a small, explicitly named target set and a harmless command, then decide how many simultaneous failures the service can tolerate. Write down the cancellation and recovery plan for nodes already running. Keep dynamic tag targeting under review so a larger target population cannot silently alter the intended rollout boundary. Separate the dispatch decision from the node-level recovery decision in the rollout record. Ask the change owner to identify the maximum acceptable in-flight population and explain how an operator will find those nodes if further dispatch stops during the pilot.

\n

Verification

\n

Proposed verification: retain the target list, command ID, chosen limits and per-node results from a controlled pilot. Induce a harmless failure on an approved test node and compare subsequent dispatch with in-flight completions. Verify the rollback procedure separately before using the same pattern for a disruptive command.

\n

Official reference

\n

AWS — Run commands at scale. Reviewed October 20, 2026.

", "content_text": "Stopping further dispatch does not stop commands already executing on managed nodes.\nSource facts\nSystems Manager Run Command accepts max-concurrency and max-errors as separate controls. The error limit stops dispatch to additional managed nodes after the allowed error count is exceeded. Commands already running are allowed to complete and may also fail. AWS advises concurrency of one when strict sequential failure control is required. The documented default for max-errors is zero, which stops additional dispatch after the first returned error.\nSource: AWS — Run commands at scale.\nApplicability\nThis describes Run Command fleet dispatch behavior. It is not an application rollback mechanism and does not describe Patch now concurrency defaults or every Automation control.\nDSE recommendation\nDSE recommends treating both settings as part of the approved change. Start with a small, explicitly named target set and a harmless command, then decide how many simultaneous failures the service can tolerate. Write down the cancellation and recovery plan for nodes already running. Keep dynamic tag targeting under review so a larger target population cannot silently alter the intended rollout boundary. Separate the dispatch decision from the node-level recovery decision in the rollout record. Ask the change owner to identify the maximum acceptable in-flight population and explain how an operator will find those nodes if further dispatch stops during the pilot.\nVerification\nProposed verification: retain the target list, command ID, chosen limits and per-node results from a controlled pilot. Induce a harmless failure on an approved test node and compare subsequent dispatch with in-flight completions. Verify the rollback procedure separately before using the same pattern for a disruptive command.\nOfficial reference\nAWS — Run commands at scale. Reviewed October 20, 2026.", "content_markdown": "Stopping further dispatch does not stop commands already executing on managed nodes.\n\n## Source facts\n\nSystems Manager Run Command accepts max-concurrency and max-errors as separate controls. The error limit stops dispatch to additional managed nodes after the allowed error count is exceeded. Commands already running are allowed to complete and may also fail. AWS advises concurrency of one when strict sequential failure control is required. The documented default for max-errors is zero, which stops additional dispatch after the first returned error.\n\nSource: [AWS — Run commands at scale](https://docs.aws.amazon.com/systems-manager/latest/userguide/send-commands-multiple.html).\n\n## Applicability\n\nThis describes Run Command fleet dispatch behavior. It is not an application rollback mechanism and does not describe Patch now concurrency defaults or every Automation control.\n\n## DSE recommendation\n\nDSE recommends treating both settings as part of the approved change. Start with a small, explicitly named target set and a harmless command, then decide how many simultaneous failures the service can tolerate. Write down the cancellation and recovery plan for nodes already running. Keep dynamic tag targeting under review so a larger target population cannot silently alter the intended rollout boundary. Separate the dispatch decision from the node-level recovery decision in the rollout record. Ask the change owner to identify the maximum acceptable in-flight population and explain how an operator will find those nodes if further dispatch stops during the pilot.\n\n## Verification\n\nProposed verification: retain the target list, command ID, chosen limits and per-node results from a controlled pilot. Induce a harmless failure on an approved test node and compare subsequent dispatch with in-flight completions. Verify the rollback procedure separately before using the same pattern for a disruptive command.\n\n## Official reference\n\n[AWS — Run commands at scale](https://docs.aws.amazon.com/systems-manager/latest/userguide/send-commands-multiple.html). Reviewed October 20, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/aws-ssm-run-command-error-threshold-concurrency/", "url": "https://update.dsesecurity.com/updates/aws-ssm-run-command-error-threshold-concurrency/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-10-20" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/aws-ssm-run-command-error-threshold-concurrency/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Business Continuity", "item": "https://update.dsesecurity.com/topic/business-continuity/" }, { "@type": "ListItem", "position": 3, "name": "Pair Run Command error limits with concurrency before a fleet rollout", "item": "https://update.dsesecurity.com/updates/aws-ssm-run-command-error-threshold-concurrency/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/aws-ssm-run-command-error-threshold-concurrency/#article", "identifier": "https://update.dsesecurity.com/updates/aws-ssm-run-command-error-threshold-concurrency/", "url": "https://update.dsesecurity.com/updates/aws-ssm-run-command-error-threshold-concurrency/", "headline": "Pair Run Command error limits with concurrency before a fleet rollout", "description": "Stopping further dispatch does not stop commands already executing on managed nodes.", "abstract": "Stopping further dispatch does not stop commands already executing on managed nodes.", "articleBody": "Stopping further dispatch does not stop commands already executing on managed nodes.\nSource facts\nSystems Manager Run Command accepts max-concurrency and max-errors as separate controls. The error limit stops dispatch to additional managed nodes after the allowed error count is exceeded. Commands already running are allowed to complete and may also fail. AWS advises concurrency of one when strict sequential failure control is required. The documented default for max-errors is zero, which stops additional dispatch after the first returned error.\nSource: AWS — Run commands at scale.\nApplicability\nThis describes Run Command fleet dispatch behavior. It is not an application rollback mechanism and does not describe Patch now concurrency defaults or every Automation control.\nDSE recommendation\nDSE recommends treating both settings as part of the approved change. Start with a small, explicitly named target set and a harmless command, then decide how many simultaneous failures the service can tolerate. Write down the cancellation and recovery plan for nodes already running. Keep dynamic tag targeting under review so a larger target population cannot silently alter the intended rollout boundary. Separate the dispatch decision from the node-level recovery decision in the rollout record. Ask the change owner to identify the maximum acceptable in-flight population and explain how an operator will find those nodes if further dispatch stops during the pilot.\nVerification\nProposed verification: retain the target list, command ID, chosen limits and per-node results from a controlled pilot. Induce a harmless failure on an approved test node and compare subsequent dispatch with in-flight completions. Verify the rollback procedure separately before using the same pattern for a disruptive command.\nOfficial reference\nAWS — Run commands at scale. Reviewed October 20, 2026.", "datePublished": "2026-10-20T18:14:05+00:00", "dateModified": "2026-10-20T18:34:30+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/aws-ssm-run-command-error-threshold-concurrency/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/aws-ssm-run-command-error-threshold-concurrency/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Pair Run Command error limits with concurrency before a fleet rollout" }, "articleSection": [ "Business Continuity", "Cybersecurity", "IT" ], "keywords": [ "Business Continuity", "Cybersecurity", "IT", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "@type": "Thing", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 274, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "AWS — Run commands at scale", "url": "https://docs.aws.amazon.com/systems-manager/latest/userguide/send-commands-multiple.html" } } ] } }