AWS SSM Automation with running OS level command remotely on EC2 | S3 | AWS Systems Manager Document

Hello everyone, my name is Amit. I am here to give some tips and tricks about cloud learning and some day to day problem solving methods. I'm an professional cloud engineer, working in this fields for 12+ years.
If you have any queries regarding AWS issues... feel free to reach out to me.
In this video, I have discussed Systems Manager Automation, which enables you to automate tasks and processes in a safe and secure manner using AWS Systems Manager Documents.
Systems Manager Documents are JSON or YAML scripts that define the actions to be performed by Automation. These documents can include tasks such as running commands, creating and managing AWS resources, and updating instances. The Automation service runs these documents on specified targets, which can be EC2 instances, on-premises servers, or other AWS resources.
By using Systems Manager Automation, you can reduce manual errors and save time by automating repetitive and error-prone tasks. Additionally, you can enforce best practices and ensure consistency across your environment by using pre-defined and approved scripts. You can also use Automation to run scripts on instances at specified intervals, or as part of a larger workflow, making it a valuable tool for maintenance and compliance purposes.
AWS Systems Manager Automation with Systems Manager Documents can be used in AWS organizations of any size to automate and manage operational tasks and processes. This can help organizations save time and reduce manual errors by automating repetitive tasks, enforce best practices and ensure consistency, and improve efficiency and productivity.
In conclusion, Systems Manager Automation with Systems Manager Documents provides a secure and efficient way to automate operational tasks and processes across your AWS environment.
Codebase: github.com/nsp...
My email Id : [e-mail]
Patreon: patreon.com/BeyondtheCloud56
facebook: / beyondthecloud2022
Linkedin: / beyondthecloud2023
#aws #amazonwebservices #software #softwareengineer #developers #clouds #cloudengineer #cloudcomputing #systemdesign #database #programming #fullstack #cloudsecurity #security #fullstacksoftwareengineering #itindustry #engineering #engineer #beyondthecloud #AWSSystemsmanager #AWSdocuments #AWSautomation #s3 #S3sucurity #yamlfile #jsontemplate #python #pythonprogramming
@BeABetterDev @AWSTutorialsOnline @cluut @TinyTechnicalTutorials @BlockExplorerMedia @nickchapsas @itversity @TechwithLucy @Intellipaat @knowledgeindia @SimplilearnOfficial @TechnicalGuftgu @MachineLearningHub @edurekaIN @in28minutes @CodeWithHarry @QuickSupport @byluckysir

[@beyondthecloud]

Please provide your valuable feedback in the comment section. Please like share and subscribe for more upcoming content.

[@bhavanikrishnan1868]

It is a very valuable information, great work! interested in knowing more how it works in organizations across multiple accounts

[@beyondthecloud]

Glad it was helpful!

[@jaswanth_kumar_k]

You got new subscriber ❤
Have one question like can I get the output over the mail (from SNS) I tried but getting only events details not exact output
Also intead of metadata information can I run any custom commands or scripts to check required packages are inatlled or not on my EC2 instances ( like falcon, crowdsteike,..)

[@beyondthecloud]

Thank you for your comment. Yes you can definitely try that. I think what you might need a S3 bucket notification lambda which will trigger when there will be a new report in the bucket. This lambda can parse the output in correct format and send the information to sns or sqs.
For your second query, you can definitely do that. The reason behind the automation is to run this type of OS commands.

[@venkatasivam4880]

Hello, Firstly thank you so much for the videos. I am going through your videos. I have gone through this solution and implemented it. Just curious to know after creation of ssm document can we send the sns notifications of the agents status whether it is success or failure and can it be implemented in the existing cloud formation template.

[@beyondthecloud]

Thank you for your question. Yes you can do that. Create two new resources like lambda and one sns topic. Now create bucket notification for the ssm result and subscribe that with Lambda target. From Lambda push the event or parsed event to sns topic for notifications.

[@venkatasivam4880]

Thank you so much for the response. Will try that option.

[@venkatasivam4880]

Can we update the existing AWS SSM document?

[@MadhurBhardwaj-l1l]

excellent video, I'm new to SSM document and trying something new on this. I;m facing an issue with SSM document. when I run aws ssm get-parameters it shows access denied , however the Role linked with machine has permission

[@beyondthecloud]

How can I help you?

[@bepositive6525]

Good information

[@beyondthecloud]

So nice of you

[@baranlirath5949]

I want to know organisation level

[@beyondthecloud]

Sure