AWS re:Invent 2025 - Centralize Multicloud Management using AWS (COP342)

Centralized Multicloud Management with AWS

Challenges of Multicloud Environments

• Dealing with a proliferation of tools, skills, and processes across different cloud providers
• Maintaining visibility, compliance, and security over a distributed infrastructure
• Automating operations and reducing manual effort at scale

Establishing a Centralized Inventory

• Leveraging the AWS Systems Manager (SSM) agent to register and manage resources across clouds
• Automating the installation and registration of the SSM agent using API Gateway, Lambda, and AWS Parameter Store
• Gaining a unified view of all managed nodes through the Systems Manager console

Ensuring Patch Compliance

• Using Systems Manager Patch Manager to scan resources for missing patches and track compliance
• Automating patch scans and remediations across the multicloud environment
• Logging patch compliance data to a centralized location for reporting and auditing

Secure Remote Access and Automation

• Utilizing Systems Manager Session Manager for remote access without exposing nodes to the internet
• Logging all session activity to CloudWatch for security and audit purposes
• Automating tasks and scripts at scale using Systems Manager Automation

Centralized Observability

• Bootstrapping the CloudWatch agent on nodes using Systems Manager associations
• Centralizing logs from across accounts and regions using CloudWatch log rules
• Exposing operational metrics and insights through Amazon Managed Grafana

Business Impact and Customer Success

• Philip 66 achieved:
  • 30% reduction in mean time to recover
  • Single pane of glass for observability across services
  • Improved security posture and cost optimization

AWS Multicloud Capabilities

• AWS has been supporting multicloud scenarios since 2016
• Continued investment in new services and features to enable multicloud management
• Resources available for further exploration, including blogs and in-person kiosks

Key Takeaways

• Centralized management of multicloud resources is achievable using AWS tools and services
• Automating tasks like patch management, remote access, and observability can significantly improve efficiency and security
• Customers have realized tangible benefits like reduced downtime, improved visibility, and optimized costs
• AWS provides a growing set of capabilities to address the challenges of managing a multicloud environment