Hierarchical relationship between Systems Manager and Organizations

0

Hi - I'm looking to start using both Organizations and Systems Manager. Can someone clarify what the hierarchical relationship is between these two please. Can I have 1 Systems Manager 'instance / setup' per Organization; OR is Systems Manager somehow above Organizations such that it can manage assets across multiple Organizations ? (i.e. so Systems Manager is effectively at the root admin level). Intuitively I would think it's the first of those 2 but would like to know before I kick things off...

Context : From an OU setup, I want to have something like ...

  • Org A dev
  • Org A staging
  • Org A prod
  • Org B dev
  • Org B staging etc

... hence trying to understand how Systems Manager would fit in here....

Many thanks in advance

已提问 7 个月前232 查看次数
1 回答
1
已接受的回答

Hi,

AWS Organizations and AWS Systems Manager are two separate services in AWS, and they serve different purposes.
Systems Manager [1] is a collection of capabilities that helps you automate management tasks across your AWS resources.
Organizations [2], on the other hand, is a service that enables you to consolidate multiple AWS accounts into an organization that you create and centrally manage.

In your use case, you would typically use AWS Organizations to structure your accounts into OUs and apply policies to those OUs.
AWS Systems Manager would then be used within each AWS account to manage the resources and instances specific to that account.
Additionally, you can use the Organization's management account to perform administrative actions, or, if you want to use one account as a "Delegated Administrator" for the Systems Manager to manage resources across your organization, you can do that as well [3].

References:
[1] https://docs.aws.amazon.com/systems-manager/latest/userguide/what-is-systems-manager.html
[2] https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html
[3] https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-ssm.html

Please let me know if this makes it clear.

Thanks,
Atul

profile picture
已回答 7 个月前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则