AWS Systems Manager Automation enables users to maintain and deploy AWS resources using simple scripts. These scripts specify the steps to be executed in response to an event or through manual intervention. AWS Systems Manager allows you to define your Automation runbooks or execute the existing automation documents for some common tasks.
In this Cloud Lab, you’ll learn how to use System Manager Automation to manage EC2 instances in an environment. You’ll start deploying a VPC with a public and private subnet. You’ll also create a security group and IAM role for your EC2 instance. Then, you’ll create an Automation runbook to launch EC2 instances in the private subnet with the required software packages. Moving on, you’ll create a custom AWS Config rule to detect EC2 instances in a public subnet. You’ll add a System Manager Automation document to this task to automate terminating the instance in the public subnet.
The infrastructure diagram below shows the provisioned infrastructure that you’ll build in this Cloud Lab: