AWS Systems Manager State Manager vs Fabric

AWS Systems Manager State Manager automates keeping managed nodes and other AWS resources in a state that customers define. Its associations specify the configuration to maintain, when to apply it and which resources to target. Targets can be selected by tags, AWS Resource Groups, individual node IDs or all managed nodes in the current Region and account. Associations can run immediately or later and accept most standard cron and rate expressions, but association cron expressions cannot specify months. On Linux, macOS and Windows Server managed nodes, State Manager can bootstrap software, schedule agent updates, configure network settings, join nodes to a Microsoft Active Directory domain and run scripts. Association run output can be stored in Amazon S3, and State Manager is supported as an event type and target type in Amazon EventBridge rules. It has no additional charge, although limits may apply. State Manager runs as a cloud service with an agent-based model. AWS Systems Manager follows a shared responsibility model: AWS protects cloud infrastructure, while customer responsibilities depend on the service, data and requirements. Third-party auditors assess Systems Manager under assurance programs including SOC, PCI, FedRAMP and HIPAA.

Fabric is a free, open-source Python library for running shell commands remotely over SSH and returning Python objects. It supports individual hosts and multiple hosts, with serial or parallel execution, and can run Python functions or code blocks against those connections. Through Invoke, Fabric exposes Python tasks with parameters and pre- or post-tasks through the fab command-line tool; a comma-separated host list supports serial task execution. Paramiko supplies SSH protocol support, while documented authentication methods include private key files, SSH agents, and passwords. The installation guide recommends pip install fabric and lists Python, Invoke, and Paramiko as requirements. Fabric is available for Linux, macOS, and Windows in a self-hosted, agentless model. Its documentation says it adds no extra GSSAPI support beyond Paramiko’s connection parameters. Modern Fabric can be installed alongside Fabric 1 for a gradual upgrade. Each run or sudo call uses a separate remote shell session, so directory changes do not persist between calls.