SMS Session Manager
- Allows to start a secure shell on EC2 and on-prem servers.
 
- No SSH access, Bastion hosts, or SSH keys needed.
 
- No port 22 needed.
 
Run Command
- Execute a script or just run a command.
 
- Run command across multiple instances.
 
- No SSH needed.
 
- Output can be shown in AWS Console, sent to S3 bucket or CloudWatch logs.
 
- Send notifications to SNS about command status.
 
Patch Manager
- Automates the process of patching managed instances.
 
- Supports EC2 instances and on-prem servers.
 
- Patch on-demand or on a schedule.
 
Automation
- Simplifies common maintenance and deployment tasks for EC2 instances or other resources.
 
- Automation Runbook: SSM documents to define actions preformed.