AWS Systems Manager - Run Command, RunAnsiblePlaybook

2. Vijaya Nirmala Gopal
Hybrid Cloud Implementation Specialist
IBM GTS Labs, Redhat Center of Excellence

3. Photo credit: Amazon

5. AWS Systems Manager - Use case - Run Command for Ansible

6. AWS Systems Manager - Prerequisites

7. RunAnsiblePlaybook
Create Ansible
Playbook/Role
Package the
Code in S3
Configure/Setup
Target Instances
Apply from SSM

8. Identify the Instances and prep
with required permissions
Package the play into S3
SSM - RunAnsiblePlaybook -
point to s3 URL
Verify logs from S3 bucket
Apply SSM Runcommand
Pick the play from Git/Ansible
Galaxy

9. RunAnsiblePlaybook - Step 1

11. RunAnsiblePlaybook - Step 3

14. Check status of the SSM Agent
1) SSM Agent is the key
2) Available in Amazon AMIs
3) Other flavours of OS needs installation
4) For fresh instances deploy via user data

15. Download Ansible role from galaxy

16. Package the code into S3
1) Code packaging will be one time activity if role from galaxy is used
2) If code is used from Repo, then add steps to move code from Repo to S3
3) Code is safe and encrypted, if packaged in S3

17. RunAnsiblePlaybook - Step 9
Configure Playbook Run for Deploying Snowsql

18. Select Target Instances - Cloud/On-Prem - Manual
RunAnsiblePlaybook - Step 10

19. RunAnsiblePlaybook - Step 11
Select Target Instances - Cloud/On-Prem - Tags

20. RunAnsiblePlaybook - Step 12
Define Playbooks for Target Instances

21. Rate Control & Logging Definitions

22. RunAnsiblePlaybook
Apply Playbook on Target Instances

23. RunAnsiblePlaybook - Step 15
RunAnsiblePlaybook -
SuccessLogs

24. RunAnsiblePlaybook
Target Instances - Logs

25. Target Instances - View Console Logs
RunAnsiblePlaybook - Step 17

26. On Error - In S3
RunAnsiblePlaybook - Step 18

27. On Error - View from Console

29. Unbeatable gains on using AWS SSM for patch or deploy tasks
1. 1) SSH keys management & monitoring is eliminated
2. 2) Centralized logs for all instance deployments
3. 3) Cloudtrail captures the API calls against each resource
4. 4) Log verification in N instances makes tracking easier
5. 5) Well secured Authentication and Authorization(IAM Roles,
Policies)

30. Vijaya Nirmala Gopal (Nirmala)
Hybrid Cloud Implementation Specialist,
IBM GTS Labs, Redhat Center of Excellence
https://galaxy.ansible.com/gvnirmalaa/ansible_role_snowsql
https://cloudgoddess.blogspot.com