AWS Systems Manager State Manager vs cdist

AWS Systems Manager State Manager automates keeping managed nodes and other AWS resources in a state that customers define. Its associations specify the configuration to maintain, when to apply it and which resources to target. Targets can be selected by tags, AWS Resource Groups, individual node IDs or all managed nodes in the current Region and account. Associations can run immediately or later and accept most standard cron and rate expressions, but association cron expressions cannot specify months. On Linux, macOS and Windows Server managed nodes, State Manager can bootstrap software, schedule agent updates, configure network settings, join nodes to a Microsoft Active Directory domain and run scripts. Association run output can be stored in Amazon S3, and State Manager is supported as an event type and target type in Amazon EventBridge rules. It has no additional charge, although limits may apply. State Manager runs as a cloud service with an agent-based model. AWS Systems Manager follows a shared responsibility model: AWS protects cloud infrastructure, while customer responsibilities depend on the service, data and requirements. Third-party auditors assess Systems Manager under assurance programs including SOC, PCI, FedRAMP and HIPAA.

cdist is a free, open-source configuration management system that applies a defined state to computers through shell scripts and cdist types. It is positioned as an alternative to Ansible, Chef, and Puppet. Types provide the extension mechanism, and the project says their results are idempotent, so outcomes do not depend on call order. cdist uses push mode: source computers connect to targets over SSH and apply configuration, without requiring a central server or an agent on the target. A target needs a POSIX-compatible shell and SSH server, while the source needs a POSIX-like shell, Python 3.5 or later, and an SSH client. The project lists a small core, standard types, and parallel execution. Installation is documented through Git or pip. Supported systems include Linux distributions, BSD systems, Mac OS X, and XenServer. Manuals are available in HTML and man-page formats, with community help through Matrix and IRC.