AWS Systems Manager - AWS GovCloud (US)
How AWS Systems Manager Differs for AWS GovCloud (US)Documentation for AWS Systems ManagerExport-Controlled Content

AWS Systems Manager

Use AWS Systems Manager to organize, monitor, and automate management tasks on your AWS resources.

How AWS Systems Manager Differs for AWS GovCloud (US)

The implementation of Systems Manager is different for the AWS GovCloud (US) Regions in the following ways:

  • The following Systems Manager capabilities are not yet available for the AWS GovCloud (US) Regions:

    • Change Manager

    • Incident Manager

  • The following Systems Manager features are not yet available for the AWS GovCloud (US) Regions:

    • In the Application Manager capability, integration with AWS Cost Explorer functionality is not available.

    • In the Explorer capability, delegated administrator support for Explorer is not available.

    • In the OpsCenter capability, markdown support is not available in the OpsItem description field in the console.

    • In the Patch Manager capability, support for Quick Setup patch policy configurations is not available.

    • In the Quick Setup capability, support for AWS Organizations is not available.

    • In the State Manager capability, support for viewing association histories is not available.

Other differences:

  • SSM Agent for AWS GovCloud (US) can be downloaded from the following location:

    https://amazon-ssm-us-gov-east-1.s3.us-gov-east-1.amazonaws.com/latest/windows_amd64/AmazonSSMAgentSetup.exe

Documentation for AWS Systems Manager

AWS Systems Manager documentation.

Export-Controlled Content

For AWS Services architected within the AWS GovCloud (US) Regions, the following list explains how certain components of data may leave the AWS GovCloud (US) Regions in the normal course of the service offerings. The list can be used as a guide to help meet applicable customer compliance obligations. Data not included in the following list remains within the AWS GovCloud (US) Regions.

  • The following AWS Systems Manager metadata fields are not permitted to contain export-controlled data:

    • Document names

    • Parameter Store parameter names

    • Patch group names (that is, the value of the Patch Group tag)