Core Tools
- Session Manager provides shell access without opening inbound SSH or RDP ports.
- Run Command executes commands across managed instances without logging in directly.
- Patch Manager automates operating system and application patch baselines.
- State Manager keeps managed nodes in a desired configuration state.
Automation
- Automation documents define repeatable operational workflows.
- AWS Config remediation and EventBridge rules can trigger Systems Manager Automation.
- Parameter Store stores configuration values and SecureString secrets protected by KMS.
- Inventory collects metadata about software, files, services, and instance configuration.
Exam Cues
- Need no-bastion access to private instances: Session Manager.
- Need one-time commands across a fleet: Run Command.
- Need ongoing desired state: State Manager.
- Need repeatable incident remediation: Automation.
Practice Systems Manager Questions
Put your knowledge to the test with practice questions.