Systems Manager (SSM) is a suite for operating your AWS and on-prem fleet at scale — running commands, patching, storing parameters, and connecting to instances without SSH keys.
The features the exam tests
Run Command executes commands across many instances at once. Patch Manager automates OS patching. Parameter Store holds config and secrets. Session Manager gives shell access to instances without opening SSH ports or managing keys — a common secure-access answer.
Test yourself
A security team wants admins to access EC2 instances for troubleshooting without opening inbound SSH ports or managing SSH keys. What enables this?
- Systems Manager Session Manager
- Opening port 22 to the office IP
- A bastion host with SSH keys
- A public IP on each instance
👉 Click to reveal the answer & explanation
Correct answer: A. Session Manager provides secure shell access through the SSM agent with no open inbound ports and no SSH keys to manage. Opening port 22 (B), a key-based bastion (C), or public IPs (D) all increase exposure and key-management burden.
Related topics
AWS Secrets Manager · AWS IAM · Amazon EC2
Ready to pass the AWS Solutions Architect Associate (SAA-C03)?
Stop guessing whether you’re ready. Our full-length, exam-realistic practice exams put you through the exact question style you’ll face — with a detailed explanation behind every answer, so you learn why, not just what.
- ✓ 6 full-length practice exams
- ✓ A detailed explanation for every single question
- ✓ Realistic, scenario-based questions — not memory dumps
- ✓ Lifetime access, kept current for 2026
Get the SAA-C03 Practice Exams →or try 25 free questions first