Run Command
- Execute commands on managed instances without SSH
- Rate control: concurrency + error threshold
- Output to S3 or CloudWatch Logs
- Common documents: AWS-RunShellScript, AWS-RunPowerShellScript
Automation
- Multi-step runbooks with branching and approval steps
- Actions: aws:executeScript, aws:runCommand, aws:invokeLambdaFunction, aws:approve
- Rate control for bulk operations
- EventBridge integration for event-driven automation
Patch Manager
- Patch baselines: auto-approval rules, approved/rejected patches
- Maintenance windows: scheduled patching with targets and tasks
- Compliance reporting: patch compliance across fleet
- Scan and install modes
Parameter Store
- Standard (free, 10K limit) vs Advanced (paid, 100K, policies)
- Types: String, StringList, SecureString (KMS encrypted)
- Parameter policies: expiration, notification, no-change notification
- Hierarchical naming: /env/app/key — use GetParametersByPath
Practice Systems Manager Questions
Put your knowledge to the test with practice questions.