AWS systems-manager documentation change
Summary
Updated State Manager association triggers and added cost considerations for Automation executions
Security assessment
Mirrors changes from organizations.md - operational updates about association timing and cost warnings. No security-specific content added or modified.
Diff
diff --git a/systems-manager/latest/userguide/systems-manager-setting-up-single-account-region.md b/systems-manager/latest/userguide/systems-manager-setting-up-single-account-region.md index e2911088e..32879d219 100644 --- a//systems-manager/latest/userguide/systems-manager-setting-up-single-account-region.md +++ b//systems-manager/latest/userguide/systems-manager-setting-up-single-account-region.md @@ -30,3 +30 @@ State Manager associations - * `SystemAssociationForManagingInstances` – Runs every 30 days and ensures the `AmazonSSMManagedInstanceCore ` policy is applied to instance profiles attached to your nodes. If there's not at instance profile attached to the node, Systems Manager creates an instance profile with the `AmazonSSMManagedInstanceCore ` policy and attaches it to the node. If your nodes already have an instance profile attached, the policy is appended to the instance profile. If the instance profile already contains the necessary permissions, no changes are made. - -###### Note + * `SystemAssociationForManagingInstances` – Runs at minimum every 30 days and each time a new instance is launched. Ensures the `AmazonSSMManagedInstanceCore` policy is applied to instance profiles attached to your nodes. If no instance profile is attached to the node, Systems Manager creates an instance profile with the `AmazonSSMManagedInstanceCore` policy and attaches it to the node. If your nodes already have an instance profile attached, the policy is appended to the instance profile. If the instance profile already contains the necessary permissions, no changes are made. @@ -35,0 +34,8 @@ If a node was launched by AWS CloudFormation, the changes Systems Manager makes +###### Important + +Each time a new instance is launched, this `SystemAssociationForManagingInstances` association runs. If your account routinely launches a high number of instances, this can lead to elevated costs being incurred if you surpass Automation's free tier maximum for Automation executions. + +For information about Automation pricing and free tier maximums, see [Pricing for Automation](https://aws.amazon.com/systems-manager/pricing/#Automation). + +For information about targeting frequency for State Manager associations, see [About target updates with Automation runbooks](./state-manager-about.html#runbook-target-updates). +