In this hands-on, instructor-led lab, we use the AWS Management Console to deploy a new workload, create an inventory, and set up patch management. We demonstrate the importance of tagging and the ways in which it can support your operations activities. Learn the benefits of infrastructure-as-code for development and deployment of your environment, and perform operations-as-code to gain insights into your workload status. To participate in this lab, attendees must bring their own laptop and have a personal, nonproduction AWS account.

2. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Inventory and Patch Management
Using AWS Systems Manager
Brian Carlson
Operational Excellence Lead,
Well-Architected
A R C 3 3 2
Chris Kozlowski
Sr. Technical
Account Manager

3. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
The increased speed and agility of the
cloud is best supported using the same
engineering discipline and practices that
you apply to code.
Dynamic and elastic access to resources
increases the speed and agility of your
organization and benefits from equally
dynamic operations.
Why are we here?

4. “The operational excellence pillar includes the ability to run and
monitor systems to deliver business value and to continually
improve supporting processes and procedures. The
operational excellence pillar provides an overview of design
principles, best practices, and questions.”
What is the Operational Excellence Pillar?

5. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Design Principles
• Perform operations as code
• Annotated documentation
• Make frequent, small, reversible changes
• Refine operations procedures frequently
• Anticipate failure
• Learn from all operational failures

6. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
What is the Operational Excellence Pillar?
Prepare Operate Evolve

7. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

8. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

9. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Amazon VPC*
AWS Management
Console
1. Your own device for console access
2. An AWS account that you are able to use for testing.
(Should not used for production or other purposes.)
3. An available region within your account with capacity to add 2
additional VPCs
4. Download the Lab Guide at https://bit.ly/2QqQ15V
https://s3-us-west-2.amazonaws.com/aws-well-architected-
labs/Operations/ARC332+Lab+Guide.html
Requirements

10. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Amazon EC2
IAM
1. Create an Administrator IAM user and group
2. Log in with your IAM Administrator user
3. Create an Amazon Elastic Compute Cloud
(Amazon EC2) Key Pair
Lab Setup

11. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

12. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Stack
AWS CloudFormation
Template
1. Deploy the Lab CloudFormation template
https://s3-us-west-2.amazonaws.com/aws-well-architected-labs/
Operations/OE_Single_VPC+_2-Tier_Application_Lab.json
2. Examine the environment in CloudFormation Designer
3. Deploy your stack
Deploy the lab environment

13. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

14. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
State Manager
Inventory
Stack
AWS Systems Manager
1. Set up Systems Manager
2. Create a second CloudFormation stack
3. Track your resources using Inventory
4. Review associations with State Manager
Understanding the Resources in your Environment

15. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

16. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

17. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Documents
Patch Manager
1. Create a Patch Baseline
2. Assign a Patch Group
3. Scan your instances
4. Patch your instances
Patch Management

18. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

19. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Patch
Manager
Amazon
EC2
Maintenance
Windows
1. Create a Patch Maintenance Window
2. Assign Targets
3. Assign Tasks
4. After the maintenance window review the results
Automating Patching with Maintenance Windows

20. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.

21. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
MFA
Maintenance
Windows
State Manager
Stack
IAM
Bucket
Topic
Removing lab resources
1. Delete your CloudFormation stacks
2. Delete your State Manager association
3. If you created a…
• Amazon Simple Storage Service (Amazon S3) bucket, delete
it
• Amazon Simple Notification Service (Amazon SNS) Topic,
delete it
• Maintenance window, delete it
4. For your Administrator User account:
• If you don’t plan to use it, delete it
• If you do plan to use it, enabling MFA is recommended

22. Thank you!
© 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Brian Carlson
Operational Excellence Lead
Well-Architected
crlsonb@amazon.com
Chris Kozlowski
Sr. Technical
Account Manager
kozlowck@amazon.com

23. © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved.