AWS Systems Manager
Systems Manager
You need to securely manage configurations, patch virtual servers, and execute shell commands across your fleet.
Reach for it when
- Storing configuration parameters, database connection strings, and license keys in Parameter Store.
- Executing shell scripts across hundreds of EC2 instances simultaneously without SSH key management.
- Automating OS patching schedules and tracking software inventory across virtual machines.
Do not reach for it when
- Storing sensitive database passwords that require automatic rotation — use Secrets Manager instead.
- Managing infrastructure as code definitions and deploying cloud resources — use CloudFormation or Terraform instead.
- Monitoring application performance metrics and compiling log files — use CloudWatch instead.
Alternatives, and how to choose
| Service | Pick it instead when |
|---|---|
| Secrets Manager | Choose it when you require automated credential rotation and built-in RDS integration. |
| CloudFormation | Choose it when you want to provision and deploy AWS infrastructure stacks using templates. |
How you pay
- The model
- Free for basic features; parameter store standard parameters are free, advanced parameters and command runs are billed.
- The line item that surprises people
- Enabling high-volume API requests or using advanced parameters can result in unexpected transaction charges.
What trips people up
- EC2 instances must run the SSM Agent and have the AmazonSSMManagedInstanceCore IAM role attached to be manageable.
- Parameter Store has a default limit of 10,000 parameters per account; exceeding this requires upgrading to advanced tier.
- Standard parameters are limited to 4KB in size; larger configurations must use advanced parameters.
Verify the live service
This page is a concept reference. Cost models are qualitative; confirm the current offering, Region and pricing before deploying.