AWS CloudFormation vs. AWS Config vs. SUSE Manager

I still give it an 8 because it's one of those tools that just quietly does the heavy lifting for you but it can really test your patience when it breaks esp with deep nested stacks. It's perfect for projects where we need clean consistent environments every time. It's less ideal for quick experimental setups like new EC2 configs or Lambda permission tweaks.

Incentivized

It's really good if your infrastructure services is all in AWS, that means everything could be audited and monitored using AWS config. You also can create alarms to notify you or your team about any changes on your AWS resources which is very useful to prevent abuse if you have a fairly large team. It's also very useful whenever some third party wants to audit your AWS resources, if you have a fairly comprehensive AWS config configured, the auditing process will be easy since they only need to look at your AWS config setup.

Incentivized

In our specific use case, SUSE Manager is extremely useful. We're having a large landscape that is divided into intake, development, quality and production with a couple of different SUSE flavours that need to be automatically rolled out, configured, patched and maintained, everything from up to date repositories that are cloned on a daily basis straight from SUSE.

Incentivized

• All resources can segregated based on stacks which provides greater visibility
• A complete audit trail of what went wrong while deploying a particular resource
• Automatically rollbacks if any service as part of CloudFormation results in an error
• The UI tool is useful

Incentivized

• The ability to track changes in AWS is paramount, AWS config allows you to do this
• Allows the auditing of an AWS account
• Can view history of an account that has AWS config enabled

Incentivized

• Manages patch levels for most Linux OS by: date, group, cloud or custom channels
• Uses a lite version of Salt to run commands or scripts on any numbers of servers at once.
• Allows the joining of groups inside SUSE Manager to quickly access or work with servers so grouped.

• Error Description upon Failure Needs to be Improved.
• Slow to create, delete or update.
• Need to delete resources manually. It can ask before starting deletion whether to skip those resources or delete them.

Incentivized

• It's only AWS, no third party.
• Not the most intuitive interface, but with a little getting used to it is OK.

Incentivized

• The cloning of patches when using the content lifecycle module in a multi-environment landscape with many SLES flavours is a bit cumbersome.
• More premade saltstate for default applications are always nice to have.
• Upgrading SUMA could be easier, especially when a Postgres upgrade is also required.

Incentivized

I am expanding the use of SUSE Manager throughout our organization and can't imagine going back to the "wild wild west" we had before.

It's easy enough to get a shared template & apply it. You don't even have to download-then-upload or copy-and-paste, a publicly-accessible url works.

Diving deeper, it has enough powerful capabilities to make the life of a platform / DevOps engineer bearable.

However, you need equally deep knowledge to troubleshoot issues, when they inevitably pop up. This is the same for all IaC technologies, as they are additional abstraction layers on top of the native API provided by the cloud providers.

Incentivized

The gui is extremely user friendly. The installation and configuration does have a learning curve, it takes a while to set everything up. But once you're passed this initial learning curve, everything is very intuitive. If you want extra automation, there's an api (eventough i personally find the documentation of the api could be ordered better). I gave this product a 9 because of the initial learning curve and the api documentation, but for the rest it suits my needs perfectly.

Incentivized

Would rate lower for other workloads but for AWS workloads its simple to set up, cost effective and customisable. Primary use case is compliance from a governance perspective.

Incentivized

SUSE Manager provided a top-tier support person on site to us for two days to help integration. We did all the standard stuff they help with before he arrived. We were able to use him to get all the tricky stuff identified and solved in the short time we had. Had they sent us a lower-tier guy, it would have been a waste. I was impressed they sent such knowledgeable person.

Cloning a virtual machine creates a virtual machine that is cloning a virtual machine creates a virtual machine that is a copy of the original. The new virtual machine is configured with the same virtual hardware, installed software, and other properties that were configured for the original virtual machine. For information about persistent memory and PMem storage, see the vSphere Cloning a virtual machine creates a virtual machine that is a copy of the original. The new virtual machine is configured with the same virtual hardware, installed software, and other properties that were configured for the original virtual machine. For information. Management guide.For information copy of the original. The new virtual Cloning virtual machine creates a virtual machine that is a copy of the original. The new virtual machine is configured with the same virtual hardware, installed software, and other properties that were configured for the original virtual machine. For information about persistent memory and PMem storage, see the vSphere Resource Management Guide. For information is configured with the same virtual hardware, installed software, and other properties that were configured for the original virtual machine. For information about persistent memory and PMem storage, see the vSphere Resource Management Guide. For information

Incentivized

I do not know or have used any other product in AWS cloud space that matches what AWS Config provides. We have some custom built monitoring and governance, however that is there because AWS Config does not provide it currently.

Incentivized

The other competitors also have a good platform and service, but we went with SUSE due to cost. The price was best and we needed to keep under a certain budget. The functionality was perfect for what we needed so we took the step forward. This allows us to manage our Linux environment within the manager and update or deploy specific tasks to each as needed.

Incentivized

• + We can standup a VPC in minutes
• - It took a lot of inital time to set up
• + With logging/rollback, made testing much easier.

Incentivized

• Enforcing audit requirements
• Easy to set up alerting when there are rule breaches
• Auto remediation reduces the manual policing of such breaches

Incentivized

• Manages patch levels for most Linux OS by: date, group, cloud or custom channels
• Make it easy to audit our own infrastructure.
• Allows the joining of groups inside SUSE Manager to quickly access or work with servers so grouped.
• 24/7 support team.
• Automatic deployment.

Incentivized