Management and Governance
CoreAWS Systems Manager
Explicit remediation runbooks and operational-process automation.
Key points
- Systems Manager provides managed-node operations, Run Command, State Manager, Automation, and patch-governance surfaces.
Best-known use cases
- D1.1, D1.2, and D3.1: execute the bounded command, desired-state association, runbook, or patch action that matches the task.
What candidates often confuse it with
- Run Command is immediate, State Manager is recurring, Automation is multi-step, and patch policies govern patch execution and compliance.
Key takeaway
Choose the Systems Manager capability from timing and workflow state, then bound targets, concurrency, errors, and roles.
Related services
- AWS Auto Scaling
- AWS CDK
- AWS CloudFormation
Relevant exam tasks
- D1.1 — Task 1.1: Implement metrics, alarms, and filters by using AWS monitoring and logging services.
- 1.1.1 — Use AWS services (for example, Amazon CloudWatch, AWS CloudTrail, Amazon Managed Service for Prometheus) to configure monitoring and logging for workloads (for example, serverless, compute, AI).
- D1.2 — Task 1.2: Identify and remediate issues by using monitoring and availability metrics.
- 1.2.1 — Analyze performance metrics and automate remediation strategies by using AWS services and functionality (for example, CloudWatch, Lambda, AWS Systems Manager, CloudTrail, Kiro, AWS DevOps Agent).
- D3.1 — Task 3.1: Provision and maintain cloud resources.
- 3.1.1 — Create and manage AMIs and container images (for example, EC2 Image Builder).