Amazon EC2 Systems Manager
User Guide

What Is Amazon EC2 Systems Manager?

Amazon EC2 Systems Manager is a collection of capabilities that helps you automate management tasks such as collecting system inventory, applying operating system patches, automating the creation of Amazon Machine Images (AMIs), and configuring operating systems and applications at scale. Systems Manager lets you remotely and securely manage the configuration of your managed instances. A managed instance is any Amazon EC2 instance or on-premises machine in your hybrid environment that has been configured for Systems Manager.


Tasks Details

Run Command

Run Command helps you remotely and securely manage the configuration of your managed instances at scale. Use Run Command to perform ad hoc changes like updating applications or running Linux shell scripts and Windows PowerShell commands on a target set of dozens or hundreds of instances.


Inventory Manager automates the process of collecting software inventory from managed instances. You can use Inventory Manager to gather metadata about OS and system configurations and application deployments.

State Management

State Manager automates the process of keeping your managed instances in a defined state. You can use State Manager to ensure that your instances are bootstrapped with specific software at startup, joined to a Windows domain (Windows instances only), or patched with specific software updates.


Automation automates common maintenance and deployment tasks. You can use Automation to create and update Amazon Machine Images, apply driver and agent updates, and apply OS patches or application updates.

Patch Management

Patch Manager automates the process of patching Windows managed instances. This feature enables you to scan instances for missing patches and apply missing patches individually or to large groups of instances by using EC2 tags. Patch Manager uses patch baselines that include rules for auto-approving patches within days of their release, as well as a list of approved and rejected patches. You can install patches on a regular basis by scheduling patching to run as a Systems Manager Maintenance Window task.

Maintenance Windows

Maintenance Windows let you set up recurring schedules for managed instances to execute administrative tasks like installing patches and updates without interrupting business-critical operations.

Parameter Store

Parameter Store centralizes the management of configuration data. You can use Parameter Store to store passwords, license keys, or database connection strings that you commonly reference in scripts, commands, or other automation and configuration workflows.

Systems Manager Documents

A Systems Manager Document defines the actions that Systems Manager performs on your managed instances. Systems Manager includes more than a dozen pre-configured documents that you can use by specifying parameters at runtime. Documents use JavaScript Object Notation (JSON) and include steps and parameters that you specify. Steps execute in sequential order.

Accessing Systems Manager

You can access Systems Manager using any of the following interfaces:

  • AWS Management Console— Provides a web interface that you can use to access Systems Manager.

  • AWS Command Line Interface (AWS CLI) — Provides commands for a broad set of AWS services, including Systems Manager, and is supported on Windows, Mac, and Linux. For more information, see AWS Command Line Interface.

  • AWS SDKs — Provides language-specific APIs and takes care of many of the connection details, such as calculating signatures, handling request retries, and error handling. For more information, see AWS SDKs.

  • Query API— Provides low-level API actions that you call using HTTPS requests. Using the Query API is the most direct way to access Systems Manager, but it requires that your application handle low-level details such as generating the hash to sign the request, and error handling. For more information, see the Amazon EC2 Systems Manager API Reference.


Systems Manager features and shared components are offered at no additional cost. You pay only for the Amazon EC2 resources that you use.

Systems Manager is also documented in the following references.