AWS Systems Manager | Run Command

Question 1

Can I trigger AWS Systems Manager automation document execution on a schedule or based on other events?

Run Command

AWS Systems Manager | Management Tools

Answer 1

Yes. You can schedule AWS Systems Manager automation document execution to be triggered as an Amazon CloudWatch Events target, or you can use AWS Systems Manager maintenance windows to trigger AWS Systems Manager automation document execution on a schedule. You can also trigger AWS Systems Manager automation document execution based on changes to AWS resources through Amazon CloudWatch Events.

Question 2

What is AWS Systems Manager run command?

Run Command

AWS Systems Manager | Management Tools

Answer 2

AWS Systems Manager provides you safe, secure remote management of your instances at scale without logging into your servers, replacing the need for bastion hosts, SSH, or remote PowerShell. It provides a simple way of automating common administrative tasks across groups of instances such as registry edits, user management, and software and patch installations. Through integration with AWS Identity and Access Management (IAM), you can apply granular permissions to control the actions users can perform on instances. All actions taken with Systems Manager are recorded by AWS CloudTrail, allowing you to audit changes throughout your environment.

Question 3

Does AWS provide any predefined commands?

Run Command

AWS Systems Manager | Management Tools

Answer 3

Yes. There are predefined commands available which are designed to help with commonly used administrative tasks. For Windows you can run a PowerShell or Shell command or script, configure Windows Update settings, and deploy an MSI application and more. For Linux you run any Shell command or script, and remotely update an installed agent. You can also create custom commands to perform common tasks required for your environment.

Question 4

Can I make bulk changes across my environments?

Run Command

AWS Systems Manager | Management Tools

Answer 4

Yes. You can act against large groups of instances by targeting using tag based queries. You can propagate changes safely across your environments by setting up rate control, which allows you to specify simultaneous execution batches with error thresholds.