diff --git a/home-manager/lcech-mac-veracode.nix b/home-manager/lcech-mac-veracode.nix
index c6dee3f..5aafa9b 100644
--- a/home-manager/lcech-mac-veracode.nix
+++ b/home-manager/lcech-mac-veracode.nix
@@ -32,11 +32,12 @@ in
   home.stateVersion = "24.11";
 
   home.packages = with pkgs; [
-    hammerspoon
-    pstree
-    watch
     colima
     docker
+    hammerspoon
+    pstree
+    ssm-session-manager-plugin
+    watch
     wireshark-qt
   ];
 
@@ -203,6 +204,9 @@ in
           sudo wg-quick up /etc/wireguard/home-remote.conf
         fi
       ''}";
+      ssm = "${pkgs.writeShellScript "ssm" ''
+        aws --profile $1 --region ''${3:-us-east-1} ssm start-session --target $2
+      ''}";
     };
 
     initContent = ''