AWS Systems Manager
What is it?
AWS Systems Manager is a suite of tools for managing and operating your AWS resources at scale — running commands, managing configuration, and storing parameters.
Explain like I'm 5
Why was it created?
Operating many servers and resources by hand doesn't scale. Systems Manager was created to centralize common operational tasks across your fleet.
Where is it used?
- Running commands across servers
- Storing configuration (Parameter Store)
- Patch management
- Secure server access without SSH keys
Why should developers care?
It's a key operations tool on AWS, especially its Parameter Store for config, which developers use to manage settings.
How does it work?
An agent on your instances connects them to Systems Manager. From a central place you can run commands fleet-wide, automate maintenance, manage patches, store configuration values in Parameter Store, and open secure sessions — all governed by IAM.
Real-world example
An ops team patches a hundred servers and stores app config values in Parameter Store, fetched by apps at runtime — without SSHing into any machine.
Common use cases
- Fleet command execution
- Configuration storage (Parameter Store)
- Patch and maintenance automation
- Secure, keyless server access
Advantages
- Centralized operations at scale
- Parameter Store for config
- Secure access without SSH keys
- IAM-governed and audited
Disadvantages
- Broad, multi-feature (learning curve)
- AWS-specific
- Requires the agent and setup
- Easy to confuse its many sub-features
When should you use it?
When operating AWS resources at scale or needing centralized config and secure access.
When should you avoid it?
For a single small instance where its breadth is more than you need.
Alternatives
Related terms
Interview questions
Beginner
- What is AWS Systems Manager?
- What is Parameter Store?
Intermediate
- How does SSM let you access servers without SSH keys?
- What can you do across a fleet with it?
Senior
- When use Parameter Store versus Secrets Manager?
- How does SSM improve operational security?
Common misconceptions
- "Systems Manager is a single tool" — it's a suite of features (commands, Parameter Store, patching, sessions).
- "Parameter Store is the same as Secrets Manager" — overlapping, but Secrets Manager adds rotation and is purpose-built for secrets.
Fun facts
- Its Session Manager lets you open a secure shell without managing SSH keys or open ports.
- Parameter Store is a popular, low-cost place to keep app configuration.
Timeline
- 2017 — AWS Systems Manager introduced
Learning resources
Quick summary
AWS Systems Manager is a suite for operating AWS resources at scale — fleet commands, patching, secure access, and Parameter Store config.
Cheat sheet
- Operate AWS fleets centrally
- Parameter Store for config
- Keyless secure access (Session Manager)
- Patching + automation