Hierarchical relationship between Systems Manager and Organizations

0

Hi - I'm looking to start using both Organizations and Systems Manager. Can someone clarify what the hierarchical relationship is between these two please. Can I have 1 Systems Manager 'instance / setup' per Organization; OR is Systems Manager somehow above Organizations such that it can manage assets across multiple Organizations ? (i.e. so Systems Manager is effectively at the root admin level). Intuitively I would think it's the first of those 2 but would like to know before I kick things off...

Context : From an OU setup, I want to have something like ...

  • Org A dev
  • Org A staging
  • Org A prod
  • Org B dev
  • Org B staging etc

... hence trying to understand how Systems Manager would fit in here....

Many thanks in advance

1 Resposta
1
Resposta aceita

Hi,

AWS Organizations and AWS Systems Manager are two separate services in AWS, and they serve different purposes.
Systems Manager [1] is a collection of capabilities that helps you automate management tasks across your AWS resources.
Organizations [2], on the other hand, is a service that enables you to consolidate multiple AWS accounts into an organization that you create and centrally manage.

In your use case, you would typically use AWS Organizations to structure your accounts into OUs and apply policies to those OUs.
AWS Systems Manager would then be used within each AWS account to manage the resources and instances specific to that account.
Additionally, you can use the Organization's management account to perform administrative actions, or, if you want to use one account as a "Delegated Administrator" for the Systems Manager to manage resources across your organization, you can do that as well [3].

References:
[1] https://docs.aws.amazon.com/systems-manager/latest/userguide/what-is-systems-manager.html
[2] https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html
[3] https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-ssm.html

Please let me know if this makes it clear.

Thanks,
Atul

profile picture
respondido há 7 meses

Você não está conectado. Fazer login para postar uma resposta.

Uma boa resposta responde claramente à pergunta, dá feedback construtivo e incentiva o crescimento profissional de quem perguntou.

Diretrizes para responder a perguntas