AWS Systems Manager | Automation Flashcards
Can I create my own compliance checks?
Automation
AWS Systems Manager | Management Tools
Yes. You can create your own compliance types that can be recorded through the API. Based on your business requirements, you can create your own checks and then record the compliance through AWS Systems Manager to track non-compliant instances. You can also view this compliance information across accounts and Regions by creating a resource data sync.
What is AWS Systems Manager automation?
Automation
AWS Systems Manager | Management Tools
AWS Systems Manager allows you to safely automate common and repetitive IT operations and management tasks across AWS resources. With Systems Manager, you can create JSON documents that specify a specific list of tasks or use community published documents. These documents can be executed directly through the AWS Management Console, CLIs, and SDKs, scheduled in a maintenance window, or triggered based on changes to AWS resources through Amazon CloudWatch Events. You can track the execution of each step in the documents as well as require approvals for each step. You can also incrementally roll out changes and automatically halt when errors occur.
What tasks can I automate?
Automation
AWS Systems Manager | Management Tools
You can automate any task that involves interaction with AWS and on-premises resources. Built-in action types let you easily interact with Amazon EC2 instances, AWS CloudFormation stacks, and more. Action types are available to invoke AWS Systems Manager run command, PowerShell scripts, and AWS Lambda functions.
Are there predefined AWS Systems Manager automation documents?
Automation
AWS Systems Manager | Management Tools
There are over 20 predefined AWS Systems Manager automation documents that you can click and execute to accomplish a wide range of tasks such as baking golden AMIs, patching Amazon EC2 instances, managing instance states, and more.
Can I create my own AWS Systems Manager automation documents?
Automation
AWS Systems Manager | Management Tools
You can customize existing AWS Systems Manager automation documents or create your own using JSON or YAML. You can also use AWS Systems Manager automation documents shared by another account and share your document with others.
Can AWS Systems Manager automation help with the approval process?
Automation
AWS Systems Manager | Management Tools
Yes. Built-in approval action types can be included in your AWS Systems Manager automation documents. The approver can be one or more AWS Identity and Access Management (IAM) users. AWS Systems Manager automation document execution will wait until the minimum number of required approvals are received or denied and proceed appropriately.
Can I execute AWS Systems Manager automation documents against an entire resource group?
Automation
AWS Systems Manager | Management Tools
Yes. You can target resource groups and execute AWS Systems Manager automation documents against specific resource types. You can also specify safety controls to indicate the number of resources in the group that should be simultaneously executed against, and you can add error thresholds that will stop AWS Systems Manager automation document execution.
Can I execute AWS Systems Manager automation document steps one at a time?
Automation
AWS Systems Manager | Management Tools
Yes. You can execute the entire AWS Systems Manager automation document in one action or choose to execute one step at a time.