AWS Cloud Operations Blog
Category: AWS Systems Manager
Automate insights for your EC2 fleets across AWS accounts and regions
Introduction Gaining insights and managing large Amazon Elastic Compute Cloud (Amazon EC2) fleet that is spread across multiple accounts and regions can be a challenging task. It’s crucial to have a quick and efficient method to identify which instances are managed by AWS Systems Manager (SSM) and gather detailed information about the instances that are […]
Setup memory metrics for Amazon EC2 instances using AWS Systems Manager
Amazon Elastic Compute Cloud (Amazon EC2) emits several metrics for your EC2 instance to Amazon CloudWatch. However, memory metrics isn’t one of the default metrics provided by Amazon EC2. Several memory heavy applications like Big Data Analytics, In-memory Databases, Real-time Streaming require you to monitor memory utilization on the instances for operational visibility. These applications […]
Automated Evidence Collection for Life Sciences continuous compliance solutions using AWS Audit Manager
In the first post of this two-part series, we highlighted how Life Sciences customers can implement a controlled change management process using AWS Systems Manager Change Manager and AWS Config. The solution in our first post, highlighted how a you can follow your Standard Operating Procedures (SOP’s) by implementing approval steps in order to make […]
Monitor hybrid and multicloud environments using AWS Systems Manager and Amazon CloudWatch
As customers accelerate their migrations to the cloud and transform their businesses, some find themselves in situations where they have to manage IT operations in a hybrid or multicloud environment. These customers are faced with additional complexity when it comes to operating their applications and infrastructure. They often must use solutions from multiple providers to […]
Downgrade SQL Server Enterprise edition using AWS Systems Manager Document to reduce cost
In this post, we will show how to downgrade SQL Server from Enterprise edition to Standard edition on Amazon Elastic Compute Cloud(EC2) instances to help you reduce cost. If you are not using any of the features of Enterprise edition, you can downgrade to Standard edition. Here is the flowchart that can help you identify […]
Migrating and automating patching at scale with AWS Application Migration Service
Since AWS Application Migration Service (AWS MGN) has been positioned as the recommended service for (rehost) migrations to AWS, we have seen an astounding speed of new feature releases, multiple enhancements, and continuous innovation aimed to address customer needs. AWS Application Migration Service (AWS MGN) is a highly automated move and improve (rehost) solution that […]
Centralizing configuration management using AWS Systems Manager
In this guest post, Kaitlyn Fedorak (Engineer) and contributors, Cody Olsen (Senior Engineer), Will Scott (Engineer), Samuel Raghunandan (Engineer), from Xero discuss their use of AWS Systems Manager Inventory and State Manager for configuration management of Amazon EC2 instances. Any team or company can leverage a similar design described in this post to save on […]
Automate updating approval cut off dates for Patch Manager Patch Baselines
AWS Systems Manager Patch Manager helps AWS customers manage and automate the process of patching their Linux and Windows managed nodes in AWS and hybrid environments. It provides various options and allows greater control over which patches are approved or rejected during installation using patch baselines. One parameter of patch baseline approval rules is the Auto […]
How to grant least privilege access to third-parties on your private EC2 instances with AWS Systems Manager
AWS Systems Manager Session Manager provides a more secure way to manage your Amazon Elastic Compute Cloud (EC2) instances without the need to open inbound ports, maintain bastion hosts, or manage SSH keys. Furthermore, you can use it with a combination of AWS services to give access to external third-parties. Due to business requirements, you […]
Implementing AWS Session Manager logging guardrails in a multi-account environment
Raiffeisen Bank International (RBI), a prominent Austrian banking group, maintains a multi-account AWS environment that allows product teams to build and test new customer features at speed, but within the limits of central security guardrails. One of these guardrails requires central logging of all sessions established to Amazon Elastic Compute Cloud (Amazon EC2) instances across the […]