AWS Systems Manager is a service that helps customers manage their AWS resources and on-premises systems. It allows users to group resources, visualize operational insights, integrate with other AWS services, and securely manage resources. Systems Manager works across hybrid/multi-cloud environments and supports many configuration and compliance tools. It provides capabilities like resource grouping, operational dashboards, patch management, automation, and remote management to help customers operate safely and securely at scale.

1. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Sandy Ramamoorthy
Sr. Manager, Product Management, Amazon Web Services
Too Many Tools?
How AWS Systems Manager Bridges Operational Models

2. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Customer Challenges
• Operate safely and securely at scale
• Unable to visualise complex applications and environments
intuitively
• Diverse set of tools for managing hybrid Cloud
• Complex licensing and hard to manage the management
infrastructure
• Ability to build custom solutions

3. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Systems Manager
Operations Cockpit for your Cloud Environment
 Group the building blocks of your applications or environment
 Visualise operational insights for applications
 Brings other AWS services in a single console
 Act using AWS best practices with built-in safeties
 Securely manage, stay compliant with patching

4. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Wide Choice To Leverage Your Investment
• Works in hybrid and multi-cloud environments
• Preserve existing investments with Ansible, PowerShell DSC and
InSpec for configuration and compliance
• Open Source support
• Cross-platform: Windows and Linux support
• API driven and fully extensible

5. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Systems Manager Customers & Partners

6. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Model Your Environment - Resource Groups
Define the building blocks of your application
• Give a meaning to a collection of AWS
resources (as an application, env, or business
unit)
• Group AWS resources based on tags using a
simple query
• Interact with a group directly rather than
individual resources

7. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Improved Visibility And Control
Setup operational dashboards
• Build and customise your own ops-
dashboards
• Leverage your existing Amazon
CloudWatch dashboards
• Monitor Compliance
• Visualise your application’s metrics

8. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
• Bootstrap instances on launch with image
builds that are compliant
• Set patch baselines with custom-defined
approvals rules
• Schedule periodic scan for compliance
• Automate Windows and Linux patching
using the custom-defined rules and
Maintenance Windows
Create Patch Baselines
Schedule Patch operation
(Scan/Patch)
Maintain Security and
Compliance
Compliance With Patch Manager

9. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Demo

10. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Safe And Secure Remote Management
• Remote management at scale without
SSH-access or bastion hosts
• Automate RBAC and audit
• Rate control for safety
• Run from external locations such as
public or private GitHub repositories
VPC2
Corp data
center
VPC1
Tags
CloudTrail
Auditing
IAM
Tags
Amazon
CloudWatch
Events
Run
Command

11. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Gain Insights From Multi-Account Instances
Account
2
Corp data
center
Amazon S3
Data Lake
Account
1
Any BI
Tool!
Amazon
QuickSight
AWS Config
Inventory
• Collect inventory - applications, files
metadata, Windows services, registry, roles
and features
• Sync cross-account/region inventory to
Amazon S3
• Analyse using Amazon Athena, Amazon
QuickSight or any BI tool
• Build solutions e.g. track applications

12. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Easy To Use Automation
• Convert manual and repetitive tasks into
automated steps
• Use predefined runbooks or create your
own runbooks
• Delegated administration to safely
perform operations at scale
• Enable approval steps
Automation document
Run the automation
Role and
permission
input

13. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
• Separate configuration data from code
• Granular RBAC for parameters based on
hierarchies, tags or specific parameters
• Setup change notifications and trigger
automated actions
Dev Test Prod
App
/app/test/db_password /app/prod/db_password
email notification
Change
notifications
(event-based)
Config And Secrets Data Management

14. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Manage Configuration Drift
State
Manager
instances
• Enforce OS configurations such as
firewall rules and anti-virus settings
• Bootstrap instances automatically
on launch
• Check compliance status
• Automatically re-apply policies to
prevent drift

15. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Systems Manager Capabilities
Run Command
State Manager
Inventory Maintenance
Window
Patch Manager Automation Parameter
Store
Resource
Groups

16. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Demo

17. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Other Enterprise Features
• Available in all AWS regions including GovCloud
• Accessible through AWS PrivateLink
• SSM Agent is installed on AWS Windows Server and Amazon Linux
AMIs
• Systems Manager is SOC, ISO and PCI compliant, HIPAA enabled
• Integrated with AWS services such as
• AWS IAM: granular RBAC
• AWS CloudTrail: audited actions
• Amazon CloudWatch Events: notification and remediation
• AWS Config: configuration history

18. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Useful Links
• Product Page: https://aws.amazon.com/systems-manager/
• AWS Management Tools Blog:
https://aws.amazon.com/blogs/mt/category/management-
tools/amazon-ec2-systems-manager/
• AWS Blog:
https://aws.amazon.com/blogs/aws/category/amazon-ec2-
systems-manager/
• Feedback: ec2-ssm-feedback@amazon.com

19. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
https://aws.amazon.com/systems-manager/
Thank you!

20. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Thank You