description AWS Systems Manager Automation Documents Overview
SSM Automation Documents are designed to execute predefined runbooks across fleets of instances. In a DR context, they are perfect for executing the 'Day 2' recovery steps: patching the newly recovered instances, running post-failover validation scripts, or scaling up resources that were temporarily scaled down. They provide a reliable, auditable way to execute maintenance and recovery tasks across diverse compute targets.
help AWS Systems Manager Automation Documents FAQ
What is an AWS Systems Manager Automation Document?
It is a runbook containing ordered steps that Systems Manager executes against AWS resources or managed instances. AWS documents can be written in YAML or JSON.
Can an SSM Automation Document run a disaster-recovery checklist?
Yes, it can sequence tasks such as running validation scripts, changing AWS resources, or invoking another AWS API. AWS provides predefined runbooks, and teams can also create custom documents for post-failover work.
Does the runbook need an IAM role?
An automation can run in the initiating user's context, but AWS recommends an IAM service role for controlled execution. The role needs permission for every service action used by the document.
Can I start an Automation Document from the command line?
Yes, the AWS CLI uses the `ssm start-automation-execution` command with the document name and parameters. The same operation is available through AWS Tools for PowerShell.
explore Explore More
Similar to AWS Systems Manager Automation Documents
compare_arrows Compare: AWS Backup Vaults See all arrow_forward
Reviews & Comments
Write a Review
Be the first to review
Share your thoughts with the community and help others make better decisions.
