SSM Agent sends status and execution information back to the Systems Manager service by using the EC2 Messaging service. SSM Agent runs on Amazon EC2 instances using root permissions (Linux) or SYSTEM permissions (Windows). CloudWatch agent replaces SSM agent in sending metric logs to CloudWatch Logs.