AWS Cloud Operations & Migrations Blog

Category: AWS Systems Manager

Achieving Operational Excellence using automated playbook and runbook

An important aspect of operational readiness is having a well-defined process to perform activities in your workload for various scenarios as indicated in Question 7 of Operational Excellence pillar in AWS Well-Architected Framework. Which aims at evaluating your workload’s readiness for operation, from process and personnel perspective. In the case of Incident response, a team […]

Console-based access to Windows instances using AWS Systems Manager Fleet Manager

Historically, customers had to choose between security and costs when establishing RDP connections to Windows servers. The newest feature in Fleet Manager provides customers with a simple and secure browser-based method for accessing Windows servers over RDP. Now you can connect to your instances directly from the browser from the AWS Management Console in just […]

Change Management for Life Sciences

In this post, we’ll demonstrate how Customers looking to maintain Good Laboratory Practices (GLP), Good Clinical Practices (GCP), Good Manufacturing Practices (GMP) can get started evaluating their environments for the controls found in Title 21 of the Code of Federal regulations (CFR) Part 11, and remediate non-compliant resources via a change control process using native […]

Centralized view of support cases opened from multiple AWS accounts using AWS Systems Manager

AWS Systems Manager Explorer is a customizable operations dashboard that reports information about your AWS resources. Explorer displays an aggregated view of operations data (OpsData) for your AWS accounts and AWS Regions. OpsData also includes information from supporting AWS services, such as AWS Trusted Advisor, AWS Compute Optimizer, and AWS Support Center cases, among other […]

Create patched clones of your workloads in a multi-account set up using AWS Systems Manager Automation

Zainab Allawi, Associate Solutions Architect, WWPS Solutions Architecture For businesses of different sizes, patch testing has mostly been manual, and patching process errors or incompatibilities could risk disrupting production workloads. AWS Systems Manager Automation simplifies the common maintenance and deployment tasks of Amazon Elastic Compute Cloud (Amazon EC2) instances and other AWS resources. It also […]

How to centrally manage AWS IoT Greengrass devices using AWS Systems Manager

Remotely managing vast fleets of disparate systems and applications can be a challenging task for edge device administrators. AWS IoT Greengrass can help these system administrators manage their edge device application stack. However, system software on these devices must be updated and maintained separately via operational policies consistent with those of their larger IT organizations. […]

How Capgemini used AWS Systems Manager and other AWS services to provide cloud-native, self-service patch management and automation

This post was written in collaboration with David Wansell, an Enterprise Cloud Architect at Capgemini with over 20 years of experience across multiple enterprise domains. He designs and builds automation and solutions that enable customers to deliver on their desired outcomes in their cloud adoption journey. Customers need a way to do patch management in […]

Automate vulnerability management and remediation in AWS using Amazon Inspector and AWS Systems Manager – Part 2

Update 11/2022 – In September 2022, Amazon Inspector added support for Windows operating systems for continual software vulnerability scanning. This post supports remediating vulnerabilities only on Linux operating systems supported by the Systems Manager agent. This post is the second part of the Automate vulnerability management and remediation series using Amazon Inspector and AWS Systems […]

Automate vulnerability management and remediation in AWS using Amazon Inspector and AWS Systems Manager – Part 1

Update 11/2022 – In September 2022, Amazon Inspector added support for Windows operating systems for continual software vulnerability scanning. This post supports remediating vulnerabilities only on Linux operating systems supported by the Systems Manager agent. AWS recently launched the new Amazon Inspector for performing continuous vulnerability scans on Amazon Elastic Compute Cloud (Amazon EC2) instances […]

Streamline Automation with Outbound Webhooks for AWS Systems Manager Runbooks

Automation runbooks let you define a set of actions that automate various operations in your AWS environment. Runbooks allow our customers to simply configure automation workflows that they can execute based on either events or a scheduled cadence. These workflows commonly require integration with third-party systems, such as Slack, Jira, and ServiceNow. As of January […]