AWS Systems Manager
Operates managed nodes across AWS, on-premises and multicloud with Automation, Run Command, State Manager and Patch Manager.
- Provider
- aws
- Kind
- Worker
- Category
- Compute
- Official docs
- https://docs.aws.amazon.com/systems-manager/latest/userguide/what-is-systems-manager.html
- Also known as
- SSM
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| accelerator | enum | none | gpu | asic | no | none | inherited |
| agentRequired | boolean | — | no | true | inherited |
| concurrency | integer | — | no | — | inherited |
| fanoutStrategy | enum | none | push | pull | hybrid | no | none | inherited |
| fanoutThreshold | integer | — | no | — | inherited |
| hybridNodes | boolean | — | no | true | inherited |
| idempotent | boolean | — | no | false | inherited |
| instances | integer | — | no | — | inherited |
| managed | boolean | — | no | false | ▸ true |
| rateControl | enum | none | fixed | aimd | no | none | inherited |
| schedule | string | — | no | — | inherited |
| tool | enum | automation | run-command | state-manager | patch-manager | maintenance-window | inventory | no | — | inherited |
| trigger | enum | queue | stream | schedule | batch | manual | yes | — | ▸ manual |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
Pure push fan-out over a social graph is brutal at the tail: one post from an account with millions of followers becomes millions of cache writes. A follower threshold above which readers merge at read time bounds that write amplification.
- — all of these hold:
- — the node's `fanoutStrategy` is "push"
- — the node's `fanoutThreshold` has no value
- — the design contains a node of kind graph-database
One worker pool consuming several queues lets a slow or poisoned queue starve the others. That is precisely what the design's per-queue isolation requirement forbids.
- — all of these hold:
- — the node has more than 1 incoming edge from a queue
- — the design requirement `isolation.perQueue` is true
A stateful compute node pinned to exactly one availability zone disappears with that zone, and its state goes with it. Nodes inside a cell are exempt, because there the cell is deliberately single-zone and redundancy comes from the other cells.
- — all of these hold:
- — the node's `stateless` is false
- — the node sits inside exactly 1 availability-zone group
- — this does not hold:
- — the node sits inside at least one cell group
nodes:
- { id: "systems-manager", component: "aws-systems-manager" }# yaml-language-server: $schema=../../schema/component.schema.json # AWS Systems Manager: operates managed nodes across AWS, on-premises and multicloud environments through # Automation, Run Command, State Manager and Patch Manager. Per "What is AWS Systems Manager?" a node is # managed only once SSM Agent is installed and reachable, and tasks are run on demand unless scheduled. schemaVersion: "1" type: "component" id: "aws-systems-manager" kind: "worker" provider: "aws" docs: "https://docs.aws.amazon.com/systems-manager/latest/userguide/what-is-systems-manager.html" aliases: ["SSM"] defaults: trigger: "manual" managed: true properties: tool: type: "enum" values: ["automation", "run-command", "state-manager", "patch-manager", "maintenance-window", "inventory"] agentRequired: type: "boolean" default: true hybridNodes: type: "boolean" default: true