Systems Manager Features
SSM On EC2
SSM Agent is pre-installed in most AMIs but requires an IAM Instance Role to work.
SSM On-Prem
Once ssm agent is installed on on-prem instances and then an IAM Role is issued to the instances in order to access the SSM in aws public Zone.
SSM Run Command
SSM Run Command does not require SSH/RDP access
Run command can also Integrate with Events Bridge
SSM Document
Stored in SSM Document Store , A JSON or YAML Template document used for configuring things or making sure things are compliant. It contains the script for all commands
SSM COmmand Documents