Hierarchical relationship between Systems Manager and Organizations

0

Hi - I'm looking to start using both Organizations and Systems Manager. Can someone clarify what the hierarchical relationship is between these two please. Can I have 1 Systems Manager 'instance / setup' per Organization; OR is Systems Manager somehow above Organizations such that it can manage assets across multiple Organizations ? (i.e. so Systems Manager is effectively at the root admin level). Intuitively I would think it's the first of those 2 but would like to know before I kick things off...

Context : From an OU setup, I want to have something like ...

  • Org A dev
  • Org A staging
  • Org A prod
  • Org B dev
  • Org B staging etc

... hence trying to understand how Systems Manager would fit in here....

Many thanks in advance

已提問 7 個月前檢視次數 232 次
1 個回答
1
已接受的答案

Hi,

AWS Organizations and AWS Systems Manager are two separate services in AWS, and they serve different purposes.
Systems Manager [1] is a collection of capabilities that helps you automate management tasks across your AWS resources.
Organizations [2], on the other hand, is a service that enables you to consolidate multiple AWS accounts into an organization that you create and centrally manage.

In your use case, you would typically use AWS Organizations to structure your accounts into OUs and apply policies to those OUs.
AWS Systems Manager would then be used within each AWS account to manage the resources and instances specific to that account.
Additionally, you can use the Organization's management account to perform administrative actions, or, if you want to use one account as a "Delegated Administrator" for the Systems Manager to manage resources across your organization, you can do that as well [3].

References:
[1] https://docs.aws.amazon.com/systems-manager/latest/userguide/what-is-systems-manager.html
[2] https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html
[3] https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-ssm.html

Please let me know if this makes it clear.

Thanks,
Atul

profile picture
已回答 7 個月前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南