Can SSM Agent run on Ec2 with BEST license?

Running the AWS Systems Manager (SSM) Agent on an F5 BIG-IP instance with a BEST license and FIPS protection can indeed be challenging, as you've encountered. The BEST license includes advanced features such as WAF (Web Application Firewall) and FIPS compliance, which imposes stricter security measures that may conflict with the SSM Agent.

If you need both WAF and less restrictive FIPS settings, you might need to explore different licensing options or configurations. However, F5 does not typically offer a license that combines WAF without the stricter FIPS requirements under the BEST tier. You may need to contact F5 sales directly to discuss custom licensing options or configurations that meet your needs.