AWS Systems Manager Incident Manager and Change Manager
Human-approved incident response and change runbooks over SSM Automation; in maintenance since 7 November 2025.
- Provider
- aws
- Kind
- Workflow engine
- Category
- Compute
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| autoApprovalAllowed | boolean | — | no | false | inherited |
| capability | enum | incident-response | change-management | no | — | inherited |
| changeCalendarCheck | boolean | — | no | false | inherited |
| compensation | boolean | — | no | false | inherited |
| durable | boolean | — | no | true | ▸ true |
| humanReview | boolean | — | no | false | ▸ true |
| incidentTrigger | enum | cloudwatch-alarm | eventbridge-event | manual | no | — | inherited |
| managed | boolean | — | no | false | ▸ true |
| pattern | enum | saga | tcc | two-phase-commit | dag | no | dag | ▸ dag |
| stepsIdempotent | boolean | — | no | false | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
stateful-node-without-zone-redundancy
A stateful compute node pinned to exactly one availability zone disappears with that zone, and its state goes with it. Nodes inside a cell are exempt, because there the cell is deliberately single-zone and redundancy comes from the other cells.
- — all of these hold:
- — the node's `stateless` is false
- — the node sits inside exactly 1 availability-zone group
- — this does not hold:
- — the node sits inside at least one cell group
nodes:
- { id: "ssm-incident-and-change-manager", component: "aws-ssm-incident-and-change-manager" }CloudFlowalibaba-cloudflowCloudOps Orchestration Servicealibaba-oosAmazon Augmented AI (A2I)aws-augmented-aiAmazon Managed Workflows for Apache Airflowaws-mwaaAWS Step Functionsaws-step-functionsAmazon Simple Workflow Serviceaws-swfAzure Durable Functionsazure-durable-functionsAzure Logic Appsazure-logic-appsCloudflare Workflowscloudflare-workflowsApache AirflowairflowArgo Workflowsargo-workflowsAstronomer AstroastronomerCadencecadenceCamunda 8camundaConductorconductorDagsterdagsterDigdagdigdagFlowableflowableInngestinngestjBPMjbpmKestrakestraLuigiluigin8nn8nNode-REDnode-redPrefectprefectPrefect Cloudprefect-cloudRestaterestateTemporaltemporalTemporal Cloudtemporal-cloudTrigger.devtrigger-devWindmillwindmillWorkatoworkatoGeneric workflow engineworkflow-engineZapierzapierApplication Integrationgoogle-application-integrationCloud Composer (Managed Service for Apache Airflow)google-cloud-composerWorkflowsgoogle-cloud-workflowsOrchestration Pipelinesgoogle-orchestration-pipelinesIBM App Connectibm-app-connectOracle Integration 3oci-integration
and 4 more → Workflow engine page# yaml-language-server: $schema=../../schema/component.schema.json # Systems Manager Incident Manager and Change Manager: human-in-the-loop runbook workflows over SSM # Automation. Per the Change Manager guide a change request needs approvals unless the change template # allows auto-approval, and the Change Calendar check is an option you turn on; per the Incident Manager # guide incidents are opened by CloudWatch alarms or EventBridge events and engage on-call contacts. # Both are in maintenance: closed to new customers since 7 November 2025, existing customers unaffected. schemaVersion: "1" type: "component" id: "aws-ssm-incident-and-change-manager" kind: "workflow-engine" provider: "aws" docs: "https://docs.aws.amazon.com/systems-manager/latest/userguide/change-manager.html" defaults: durable: true pattern: "dag" humanReview: true managed: true properties: capability: type: "enum" values: ["incident-response", "change-management"] autoApprovalAllowed: type: "boolean" default: false changeCalendarCheck: type: "boolean" default: false incidentTrigger: type: "enum" values: ["cloudwatch-alarm", "eventbridge-event", "manual"]