AWS Systems Manager Hybrid Activation

Introduction

In today’s hybrid cloud environments, managing both on-premises and cloud resources efficiently is paramount. AWS Systems Manager Hybrid Activation offers a streamlined approach to integrate your on-premises servers and virtual machines (VMs) with AWS, enabling centralized management and automation.

What is AWS Systems Manager Hybrid Activation?

AWS Systems Manager Hybrid Activation allows you to register non-EC2 machines—such as on-premises servers, VMs in other cloud environments, and edge devices—as managed nodes in AWS. This integration facilitates:

  • Centralized management of resources
  • Automation of operational tasks
  • Enhanced security and compliance

Prerequisites

Before diving into the setup, ensure you have:

  • An active AWS account
  • Necessary IAM permissions to create and manage Systems Manager resources
  • Access to the AWS Management Console or AWS CLI

Step-by-Step Guide

1. Create a Hybrid Activation

  1. Navigate to the AWS Systems Manager Console.
  2. In the left-hand menu, under Node Management, select Hybrid Activations.
  3. Click on Create activation.
  4. Provide a descriptive name for the activation (e.g., OnPrem-Activation-2025).
  5. Set the Instance limit to the number of machines you plan to register.
  6. Choose an appropriate IAM role that grants the necessary permissions for Systems Manager to manage your nodes.
  7. Optionally, add tags to help identify and organize your resources.
  8. Click Create activation.

Upon creation, note down the Activation Code and Activation ID provided. These are crucial for the next steps.

2. Install the SSM Agent on Your Machines

For Linux:

sudo yum install -y https://amazon-ssm-<region>.s3.<region>.amazonaws.com/latest/linux_amd64/amazon-ssm-agent.rpm
sudo systemctl enable amazon-ssm-agent
sudo systemctl start amazon-ssm-agent

For Windows:

  1. Download the SSM Agent Installer:

  2. Run the Installer:

    • Execute the downloaded installer and follow the on-screen instructions to complete the installation process.

  3. Register the Machine:

    • Open Windows PowerShell in elevated (administrative) mode.

    • Run the following command, replacing <ActivationCode>, <ActivationID>, and <Region> with your specific details:

      sudo amazon-ssm-agent -register -code <ActivationCode> -id <ActivationID> -region <Region>

    • This command registers the machine with AWS Systems Manager using the provided activation code and ID.

  4. Verify Registration:

    • Navigate to the Hybrid Activations section in the AWS Systems Manager Console.
    • Ensure that your machine appears under the activation details, confirming successful registration.

Best Practices:

  • Use IAM Roles: Assign appropriate IAM roles to your machines to ensure they have the necessary permissions for Systems Manager operations.

  • Monitor with CloudWatch: Set up Amazon CloudWatch to monitor the health and performance of your managed nodes.

  • Automate with Systems Manager Automation: Create automation runbooks to perform routine tasks across your hybrid environment.

Conclusion:

Integrating your on-premises Windows Server machines with AWS using Systems Manager Hybrid Activation enhances your ability to manage and automate operations across diverse environments. By following the steps outlined above, you can achieve a seamless hybrid cloud setup that drives efficiency and scalability.

For more detailed information, refer to the official AWS documentation on Hybrid Activations.