Hierarchical relationship between Systems Manager and Organizations

0

Hi - I'm looking to start using both Organizations and Systems Manager. Can someone clarify what the hierarchical relationship is between these two please. Can I have 1 Systems Manager 'instance / setup' per Organization; OR is Systems Manager somehow above Organizations such that it can manage assets across multiple Organizations ? (i.e. so Systems Manager is effectively at the root admin level). Intuitively I would think it's the first of those 2 but would like to know before I kick things off...

Context : From an OU setup, I want to have something like ...

  • Org A dev
  • Org A staging
  • Org A prod
  • Org B dev
  • Org B staging etc

... hence trying to understand how Systems Manager would fit in here....

Many thanks in advance

질문됨 6달 전232회 조회
1개 답변
1
수락된 답변

Hi,

AWS Organizations and AWS Systems Manager are two separate services in AWS, and they serve different purposes.
Systems Manager [1] is a collection of capabilities that helps you automate management tasks across your AWS resources.
Organizations [2], on the other hand, is a service that enables you to consolidate multiple AWS accounts into an organization that you create and centrally manage.

In your use case, you would typically use AWS Organizations to structure your accounts into OUs and apply policies to those OUs.
AWS Systems Manager would then be used within each AWS account to manage the resources and instances specific to that account.
Additionally, you can use the Organization's management account to perform administrative actions, or, if you want to use one account as a "Delegated Administrator" for the Systems Manager to manage resources across your organization, you can do that as well [3].

References:
[1] https://docs.aws.amazon.com/systems-manager/latest/userguide/what-is-systems-manager.html
[2] https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html
[3] https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-ssm.html

Please let me know if this makes it clear.

Thanks,
Atul

profile picture
답변함 6달 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠