Arrow keys / Click to navigate

Cloud Operations on AWS

Module 3: System Discovery

Cloud Operations on AWS

Module Overview

Methods to Interact with AWS

🖥️

AWS Management Console

⌨️

AWS CLI

📦

AWS SDKs

☁️

AWS CloudShell

AWS CLI Essentials

Session Manager (AWS Systems Manager)

AWS Systems Manager vs. AWS Config

CapabilitySystems ManagerAWS Config
PurposeManage & operate resources at scaleRecord, track, and audit configuration changes
DataGroup resources, visualize data, take actionDiscover, record, capture, analyze changes
RulesAutomation documentsManaged & custom compliance rules

Setting Up AWS Config

1

Specify settings: resource types (S3, SNS, IAM, etc.)

2

Select managed rules or custom rules (Lambda-backed)

3

AWS Config starts recording resources

4

View or search recorded resources

AWS Config Use Cases

Troubleshooting Scenario

Issue: User does not have permission to assign a new SSMManagedInstanceRole to an EC2 instance.

Cause: The iam:PassRole Resource only permits roles beginning with EC2*.

Solution: Update the PassRole Resource ARN pattern to include the actual role being passed.

Lab 1: Auditing AWS Resources

Module Summary

Next: Module 4 — Deploy and Update Resources

Module 3 Mind Map

Click branch to expand

1 / 11