Hierarchical relationship between Systems Manager and Organizations

0

Hi - I'm looking to start using both Organizations and Systems Manager. Can someone clarify what the hierarchical relationship is between these two please. Can I have 1 Systems Manager 'instance / setup' per Organization; OR is Systems Manager somehow above Organizations such that it can manage assets across multiple Organizations ? (i.e. so Systems Manager is effectively at the root admin level). Intuitively I would think it's the first of those 2 but would like to know before I kick things off...

Context : From an OU setup, I want to have something like ...

  • Org A dev
  • Org A staging
  • Org A prod
  • Org B dev
  • Org B staging etc

... hence trying to understand how Systems Manager would fit in here....

Many thanks in advance

1 Answer
1
Accepted Answer

Hi,

AWS Organizations and AWS Systems Manager are two separate services in AWS, and they serve different purposes.
Systems Manager [1] is a collection of capabilities that helps you automate management tasks across your AWS resources.
Organizations [2], on the other hand, is a service that enables you to consolidate multiple AWS accounts into an organization that you create and centrally manage.

In your use case, you would typically use AWS Organizations to structure your accounts into OUs and apply policies to those OUs.
AWS Systems Manager would then be used within each AWS account to manage the resources and instances specific to that account.
Additionally, you can use the Organization's management account to perform administrative actions, or, if you want to use one account as a "Delegated Administrator" for the Systems Manager to manage resources across your organization, you can do that as well [3].

References:
[1] https://docs.aws.amazon.com/systems-manager/latest/userguide/what-is-systems-manager.html
[2] https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html
[3] https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-ssm.html

Please let me know if this makes it clear.

Thanks,
Atul

profile picture
answered 6 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions