Management and Governance
AWS Systems Manager
AWS Systems Manager manages fleet configuration, automation, parameters, inventory, patching, and secure operational access. It supports custom GenAI hosts and applications that need controlled runbooks and configuration outside model-specific services.
Key points
- Session Manager provides auditable shell access without inbound SSH
- Automation documents encode repeatable operational steps
- Parameter Store holds configuration and references with IAM-based access
When to use it
- Patch an EC2 inference fleet through a maintenance window
- Store a nonsecret model-routing setting used by several workers
Exam tips
- Choose Secrets Manager for credentials needing rotation and Parameter Store for general hierarchical configuration
- Use automation approvals for disruptive fleet actions and never record sensitive prompts in command output