AWS SSM Powershell Run Command To Delete User and Profile

delete_user_and_profile_ssm_rc.py

import boto3
import time

INSTANCE_ID = "REPLACE_ME"
USERNAME = "REPLACE_ME"

SSM_RC_DOC_NAME = "AWS-RunPowerShellScript"
CMD_STATUS_SUCCESS = "Success"
CMD_WAIT_TIME = 2

CMD = f"""
# Delete the user profile

$profile = Get-WmiObject Win32_UserProfile -ComputerName "localhost" | where {{$_.localpath -eq 'C:\\Users\\{USERNAME}'}}
$profile.Delete()

# Delete the user account

$Computer = [ADSI]"WinNT://$Env:COMPUTERNAME"
$Computer.Delete("User", '{USERNAME}')
"""

c = boto3.client('ssm')

r = c.send_command(
    InstanceIds=[
        INSTANCE_ID
    ],
    DocumentName=SSM_RC_DOC_NAME,
    Parameters={
        'commands': [
            CMD
        ]
    }
)

print(f"Received command ID {r['Command']['CommandId']}")

while True:
    time.sleep(CMD_WAIT_TIME)
    r = c.get_command_invocation(
        CommandId=r['Command']['CommandId'],
        InstanceId=INSTANCE_ID,
    )
    print(f"Command status is: {r['Status']}")
    if r['Status'] == CMD_STATUS_SUCCESS:
        break

print("---OUTPUT CONTENT---")
print(r['StandardOutputContent'])

print("---ERROR CONTENT---")
print(r['StandardErrorContent'])