Inventory & Compliance

Inventory

Collect metadata from managed instances including applications, files, network configurations, and Windows updates.

Applications: Installed software and versions

Files: Track specific files and directories

Network: IP addresses, MAC addresses, DNS

Compliance

Patch Compliance

Track missing patches and updates

Association Compliance

State Manager association status

Custom Compliance

Define your own compliance types

Instance Info

OS name and version
Instance ID and type
Platform details
SSM Agent version

Applications

Installed applications
Application versions
Installation dates
Publisher information

Network

IP addresses
MAC addresses
Gateway information
DNS configuration

Windows

Windows updates
Windows roles
Registry keys
Services status

Query & Filter

Query inventory data
Filter by attributes
Aggregate results
Export to S3

Collection

Scheduled collection
State Manager associations
Custom collection intervals
Automatic updates

Reporting

Compliance dashboards
Non-compliant resources
Trend analysis
Custom reports

Exam Strategy Tip

Remember: Inventory collects metadata from managed instances. Compliance tracks patch status and State Manager associations. Data can be queried and exported to S3. Use Resource Data Sync to aggregate data across accounts/regions.

Back to Automation Next: Service Limitations