AWS Certified CloudOps Engineer - Associate
Systems Manager Automation Runbooks
Write and run Systems Manager Automation runbooks: the action vocabulary, step properties that make a repair safe to run unattended, the two-role permission chain, approvals, and rate control across a fleet.
Advanced 25 minutes 7 Learning Objectives
- Explain what makes a runbook different from a script and identify its document type and schema version
- Select the right Automation action for a step from the available action types
- Use maxAttempts, timeoutSeconds, onFailure, onCancel, and isCritical to make a runbook safe to run unattended
- Trace the permission chain from the caller through AutomationAssumeRole to the target service
- Diagnose the three classic Automation permission failures from their error messages
- Run a runbook across a fleet with targets, concurrency, and an error threshold
- Start a runbook from an EventBridge rule with the correct target configuration