I might be misremembering this, but IIRC if your nodes are running on latest Amazon Linux, they already have the ssm-agent pre-installed.

At most you'd need to add some permissions to the instance's role, maybe.