AMS implements best practices and maintains your infrastructure to reduce your operational overhead and risk.
AMS provides full-lifecycle services to provision, run, and support your infrastructure, and automates common activities such as change requests, monitoring, patch management, security, and backup services.
AWS Managed Services (AMS) helps you operate your AWS infrastructure more efficiently and securely.
AMS provides a consistent operating model for your entire AWS fleet leveraging detective guardrails, monitoring, security, and incident management best practices for both traditional and modernized workloads.
AWS Managed Services is available with two operations plans:
AMS Accelerate
AMS Advanced
An operations plan offers a specific set of features and has differing levels of service, technical capabilities, requirements, price, and restrictions.
AMS Accelerate
AMS Accelerate provides a range of operational services to help you achieve operational excellence on AWS.
AMS Accelerate service leverages a suite of native AWS services and features to provide a comprehensive set of infrastructure management capabilities.
AMS Accelerate is the AMS operations plan that helps you operate the day-to-day infrastructure management of your new or existing AWS environment.
AMS Accelerate provides operational services, such as monitoring, incident management, and security. AMS Accelerate also offers an optional patch add-on for EC2-based workloads that require regular patching.
AMS Accelerate features
Incident management
AMS Accelerate proactively detects and responds to incidents and assists your team in resolving issues.
Monitoring
Accounts enrolled in AMS Accelerate are configured with a baseline deployment of CloudWatch events and alarms that have been optimized to reduce noise and to identify a possible upcoming incident.
Security management
In addition, AMS Accelerate leverages Amazon GuardDuty to identify potentially unauthorized or malicious activity in your AWS environment.
AMS also supports Amazon Macie to protect your sensitive data such as personal health information (PHI), personally identifiable information (PII), and financial data
Patch management
For an AWS account with the patch add-on, AWS Managed Services applies and installs vendor updates to EC2 instances for supported operating systems during your chosen maintenance windows.
Backup management
AWS Managed Services creates, monitors, and stores snapshots for AWS services supported by AWS Backup.
AMS Advanced
AMS Advanced provides full-lifecycle services to provision, run, and support your infrastructure.
In addition to the operational services provided by AMS Accelerate, AMS Advanced also includes additional services, such as landing zone management, infrastructure changes and provisioning, access management, and endpoint security.
AMS Advanced features
Logging, Monitoring, Guardrails, and Event Management
AMS configures and monitors your managed environment for logging activity and defines alerts based on a variety of health checks.
AMS aggregates and stores all logs generated as a result of all operations in CloudWatch, CloudTrail, and system logs in S3.
Continuity management (Backup and Restore):
AMS provides backups of resources using standard, existing AWS Backup functionality on a scheduled interval determined by you
Security and access management:
AMS provides endpoint security (EPS) such as configuring anti-virus and anti-malware protection.
Patch management:
AMS applies and installs updates to EC2 instances for supported operating systems (OSs) and software pre-installed with supported operating systems.
Change management:
AMS offers Change Management, which is the mechanism for you to get access to, or affect any changes in, your managed environment.
You create a request for change (RFC) using the AMS interface. Most RFCs requested are executed automatically.
All RFCs follow a defined change management process.
Automated and self-service provisioning management:
Incident management:
AMS proactively notifies you of incidents detected by AMS.
Problem management:
AMS performs trend analysis to identify and investigate problems and to identify the root cause.
Reporting:
AMS provides you with a monthly service report that summarizes key performance metrics of AMS, including an executive summary and insights, operational metrics, managed resources, AMS service level agreement (SLA) adherence, and financial metrics around spending, savings, and cost optimization.
Service request management :
You can request information about your managed environment, AMS, or AWS service offerings by submitting service requests using the AMS interface.
Service Desk :
AMS staffs engineering operations with full-time Amazon employees to fulfill non-automated requests including incident management, service request management, and change management.
Designated resources:
Each customer is assigned a Cloud Service Delivery Manager (CSDM) and a Cloud Architect (CA)
Developer mode :
This feature enables you to iterate infrastructure designs and deployments quickly within AMS-configured accounts[1] by allowing direct access to AWS service APIs and the AWS console in addition to access to the AMS change management process.
AWS support:
AMS customers can choose the level of AWS Support they require to complement their AMS Operations plan.
Customer-managed account:
This feature enables you to request AWS accounts within the same managed environment but the ongoing operations of workloads and AWS resources within those accounts are your responsibility.
Firewall management:
AMS provides an optional managed firewall solution for Supported Firewall Services, which enables internet-bound egress traffic filtering for networks in your managed environment.