https://pulumi.com logo
Title
b

brash-student-27683

11/23/2020, 4:15 PM
I have a few hundred EC2 servers running (currently not part of a Pulumi stack). How do I do patch management across those servers? I am looking for an alternative to AWS Systems Manager. I also am looking for a way to execute other commands in these instances at scale (updating firewall rules for example). Is Pulumi a good tool to use for this use case?
b

broad-dog-22463

11/23/2020, 5:06 PM
For this, you would need to import these into Pulumi management so that Pulumi is aware of the state of these
b

brash-student-27683

11/23/2020, 5:31 PM
after I import them in the stack, how do I go about executing commands across all of them? Is pulumi a good tool to do this?
or would something like ansible be a better fit instead?
c

chilly-hairdresser-56259

11/23/2020, 5:40 PM
Do you do immutable servers or immutable config? I personally don't see Pulumi being that tool, but maybe I am wrong. I am using SSM Ansible Playbooks to update certain instance config. But you wanted to stray away from SSM.
b

broad-dog-22463

11/23/2020, 7:11 PM
I would agree with @chilly-hairdresser-56259 here
b

brash-student-27683

11/24/2020, 1:08 AM
Thanks for your pointers!