SSM Fundamentals

Core Concepts of AWS Systems Manager

What is Systems Manager?

AWS Systems Manager is a comprehensive management service that provides a unified interface to view operational data and automate tasks across AWS resources.

Operations Management: Centralized dashboard for resource health
Application Management: Parameter Store, AppConfig
Node Management: Session Manager, Run Command, Patch Manager

SSM Agent

Pre-installed

Amazon Linux 2, Ubuntu Server 16.04/18.04/20.04

Manual Installation

Windows, RHEL, CentOS, SUSE, on-premises servers

Auto-Update

Automatic updates via State Manager

Operations

  • OpsCenter
  • Explorer
  • CloudWatch Dashboard
  • Incident Manager

Application

  • Parameter Store
  • AppConfig
  • Application Manager
  • Resource Groups

Change

  • Automation
  • Change Manager
  • Change Calendar
  • Maintenance Windows

Node

  • Session Manager
  • Run Command
  • Patch Manager
  • Fleet Manager

Security

  • No SSH keys or bastion hosts needed
  • IAM-based access control
  • Encrypted communication via TLS
  • CloudTrail logging for all actions

Cost

  • Most features are free
  • Parameter Store advanced tier charges
  • Automation execution charges
  • On-premises instance management fees

Hybrid

  • Manage on-premises servers
  • Hybrid activation for non-AWS
  • Unified management interface
  • Same capabilities as EC2

Exam Strategy Tip

Remember: Systems Manager requires SSM Agent installed on instances. Session Manager eliminates the need for SSH keys and bastion hosts. Most features are free, with charges only for advanced Parameter Store and Automation executions.

Back to Topics Next: Session Manager