100 Days of AWS — Day 21- AWS System Manager — Part 2

To view the complete course, please enroll it using the below link(it’s free)


Welcome to Day 21 of 100 Days of AWS. The topic for today is AWS System Manager — Part 2. To check the first part https://www.101daysofdevops.com/courses/100-days-of-aws/lessons/day-20-aws-system-manager-part-1/

Today we are going to explore few more features with AWS System Manager.

What is AWS Systems Manager State Manager

  • AWS Systems Manager State Manager is a secure and scalable configuration management service that automates the process of keeping your Amazon EC2 and hybrid infrastructure in a state that you define.
  • One of the use case I found out of AWS System Manager State Manager is to run the command on a scheduled basis(eg: SnapShot Creation)
  • Go To Node Management → State Manager → Create association
  • Under Provide association details give some name and under Document name search for AWS-CreateSnapshot
  • In the Provide associations details give name, under Document name search for
  • Fill all the details like instance id, schedule, arn etc. Click on Create Associations.
  • But I believe there is a much better way to achieve this using data life cycle manager. Check the below blog for more info

AWS Systems Manager Parameter Store

AWS System Manager Parameter store provides secure, hierarchical storage for configuration data management and secrets management. You can store data such as:

  • passwords
  • database strings
  • license codes

Which you can then be programmatically accessed via the SSM API.

Parameter store is offered at no additional charge(unless you are going with advanced option, check this link for more info https://aws.amazon.com/systems-manager/pricing/)

Go to the parameter store https://us-west-2.console.aws.amazon.com/systems-manager/parameters → Create parameter. Give your parameter some name, select Type as String and then give your parameter value you want to store. Click on Create parameter at the bottom of the screen.

  • If you want to retreieve the secret via commandline
  • To store the secret string, under Type select SecureString. Under KMS key either select the AWS provided key or you can use your own key.
  • To get the secret via command line, this time you need to use — with-decryption flag
  • To create the secret via command line



Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
Prashant Lakhera

AWS Community Builder, Ex-Redhat, Author, Blogger, YouTuber, RHCA, RHCDS, RHCE, Docker Certified,4XAWS, CCNA, MCP, Certified Jenkins, Terraform Certified, 1XGCP