What is our primary use case?
I use AWS Systems Manager primarily for infrastructure management and automation. One of its key benefits is managing patches and updates for our EC2 instances, including both Windows and Linux workloads. It can perform compliance checks on all managed workloads, identifying which systems aren't compliant or haven't been patched.
Runbooks are a significant feature, enabling the automation of various tasks. For example, I can use a runbook to automate this process if I need to configure DNS on a hundred servers.
Parameter Store is crucial for securely storing sensitive data like database credentials. It provides an extra layer of isolation and encryption for information we don't want visible in clear text.
The inventory feature is useful because it records all applications installed on workloads managed by the AWS Systems Manager.
What is most valuable?
What I like the most about the tool is the Session Manager. It's easy to log in, connect to your instance, and start working on them. You don't have to go through the legacy SSH on port 22, which is also a security improvement.
The tool isn't a standard product. When I say it's not a standard product or suite, it's more like a value-added service. Without AWS Systems Manager, your infrastructure would still survive, but you'd have to manage your systems manually. For example, if you want to work on a hundred virtual machines without AWS Systems Manager, you'd have to perform the same task on those hundred machines a hundred times. But using Runbook, you can write one script, use predefined scripts, configure once, and push to a hundred systems.
If you ask me if you need experience to work with the solution, I'd say yes. You need to understand what you want to do with it, and you also need to understand the systems you're working on. For instance, if you want to work on a Linux machine using AWS Systems Manager, there are two parts to it. You have to understand what you want to do with it, which is relatively easy as it's a user-friendly system. Then, the bigger and more important part is understanding the Linux machine. So there are two pieces: understanding what you want to do in Linux and understanding AWS Systems Manager. If that's the right word, it's a sort of coexistence or cross-pollination.
What needs improvement?
It could be agentless if there's room for improvement in the AWS Systems Manager. Currently, you have to install agents, although, for most of the latest EC2 images, the agents come preinstalled. If it could be at the level of Ansible, which is agentless, that would be fantastic. When you compare the solution to Ansible, one of the most widely accepted tools, the agentless feature stands out. So, if the AWS Systems Manager could become agentless, that would be a significant improvement.
The Amazon support team is good if you pay more. However, there's one thing I don't like. AWS has an AWS Organizations service, which acts as an umbrella for all your multiple AWS accounts. The support team tends to treat issues on an account-by-account basis.
For example, if I have five AWS accounts that I'm managing through AWS Organizations to govern them and ensure consistent configuration, and I have a problem on all five accounts, AWS currently expects me to raise five different support tickets or issues. I would have preferred that since I'm managing these accounts from an organization, it shouldn't matter which account I raise the support issue from.
For how long have I used the solution?
I have been using the product for four years.
What do I think about the stability of the solution?
I rate the tool's stability a nine out of ten.
What do I think about the scalability of the solution?
The tool scales well. It's more like SaaS, so you don't have to worry about the node AWS is using to deploy your configurations to your workloads. Whether you have 100 workloads, 500 workloads, or even 1000, as long as you've configured them and they're managed by the AWS Systems Manager, it can act on your entire fleet. So, for scalability, I would rate it a nine out of ten. Scalability is a strong point at the moment.
What's my experience with pricing, setup cost, and licensing?
Most of the features are free. I'm not entirely certain, but I believe the pricing is generally very low. Some services that are part of Ops Manager might have associated costs.
What other advice do I have?
The tool is one way to make your life easier on AWS. If you want to manage your workloads more flexibly and agilely, then AWS Systems Manager is the way to go.
On a scale from one to ten, with ten being the best, I would give AWS Systems Manager an eight point five.