AWS Systems Manager (SSM)

• It provides a unified interface for viewing and controlling your infrastructure, automating tasks, and managing configurations. Here are some key features and components of AWS Systems Manager
• AWS Systems Manager Core Components:
  • Run Command: Executes commands on instances.
  • State Manager: Maintains desired state configurations.
  • Parameter Store: Stores configuration data and secrets.
  • Automation: Automates workflows and tasks.
  • Inventory: Collects and stores instance metadata.
  • Patch Manager: Automates patching for instances.
  • Session Manager: Provides secure access to instances.
  • OpsCenter: Manages and resolves operational issues.
  • Fleet Manager: Manages server fleets.
  • Maintenance Windows: Schedules maintenance tasks.
• Integration with Other AWS Services:
  • S3: Often used for storing logs, inventory data, and automation documents.
• Resource Targets:
  • EC2 Instances: Managed instances running on AWS.
  • RDS Instances: Managed database instances.
  • On-Premises Instances: Servers running in your data centers or other clouds, managed through Systems Manager hybrid capabilities.
  • S3 Buckets: Storage for various outputs and configurations.
• Network Architecture:
  • VPC / On-Premises: Environments where your instances and resources reside. Systems Manager can manage instances within a VPC, across multiple regions, and on-premises systems.

Use Cases:

• Automation of Routine Tasks: Use Automation to create standardized, repeatable workflows.
• Secure Remote Management: Use Session Manager for secure, audited access without SSH or RDP.
• Configuration Management: Use State Manager and Parameter Store for maintaining consistent configurations and managing secrets.
• Compliance and Inventory Tracking: Use Inventory to collect and query instance metadata for compliance and audit purposes.
• Patch Management: Use Patch Manager to automate the application of patches across your fleet.