AWS Systems Manager State Manager
State Manager, a capability of AWS Systems Manager, is a secure and scalable configuration management service that automates the process of keeping your Amazon Elastic Compute Cloud (Amazon EC2) and hybrid infrastructure in a state that you define.
State Manager and Maintenance Windows can perform some similar types of updates on your managed instances. Which one you choose depends on whether you need to automate system compliance or perform high-priority, time-sensitive tasks during periods you specify.
For more information, see Choosing between State Manager and Maintenance Windows.
How can State Manager benefit my organization?
State Manager offers these benefits:
-
Bootstrap instances with specific software at start-up.
-
Download and update agents on a defined schedule, including the SSM Agent.
-
Configure network settings.
-
Join instances to a Microsoft Active Directory domain.
-
Patch instances with software updates throughout their lifecycle.
-
Run scripts on Linux, macOS, and Windows managed instances throughout their lifecycle.
What are the features of State Manager?
Key features of State Manager include the following:
EventBridge support
This Systems Manager capability is supported as both an event type and a target type in Amazon EventBridge rules. For information, see Monitoring Systems Manager events with Amazon EventBridge and Reference: Amazon EventBridge event patterns and types for Systems Manager.
-
AWS CloudTrail integration
State Manager integrates with AWS CloudTrail to provide a record of all executions that you can audit, and Amazon EventBridge to track state changes. You can also choose to store and view detailed command output in Amazon Simple Storage Service (Amazon S3). For more information, see the following topics:
What is an association?
A State Manager association is a configuration that is assigned to your managed instances. The configuration defines the state that you want to maintain on your instances. For example, an association can specify that antivirus software must be installed and running on your instances, or that certain ports must be closed. The association specifies a schedule for when the configuration is applied once or reapplied at specified times. The association also specifies actions to take when applying the chef configuration. For example, an association for antivirus software might run once a day. If the software isn't installed, then State Manager installs it. If the software is installed, but the service isn't running, then the association might instruct State Manager to start the service.
Getting started with State Manager
Complete the following tasks to get started with State Manager.
| Task | For More Information |
|---|---|
|
Verify Systems Manager prerequisites |
|
|
Learn more about State Manager |
|
|
Create and assign a State Manager association to your instances |
Related content
Topics
