AWS Config vs. Red Hat Ansible Automation Platform

It's really good if your infrastructure services is all in AWS, that means everything could be audited and monitored using AWS config. You also can create alarms to notify you or your team about any changes on your AWS resources which is very useful to prevent abuse if you have a fairly large team. It's also very useful whenever some third party wants to audit your AWS resources, if you have a fairly comprehensive AWS config configured, the auditing process will be easy since they only need to look at your AWS config setup.

Incentivized

Ansible and AAP is well suited for orchestrating over many platforms. Its agentless architecture makes it ideal for infrastructure that cannot support an agent. It has a strong module library for the most common products, services, and platforms. It is by far the best language for anyone new to coding or automation to jump in and quickly get to a productive state. While AAP is capable of automating nearly anything, there are still advantages of using other platforms in its place. For example, Chef has been valuable for server automation because of the availability of existing cookbooks. For systems that can run an agent, having the individual nodes perform their own checks can scale a little better than the centralized model of AAP. But running an agent also means the potential risk of resource over utilization.

Incentivized

• The ability to track changes in AWS is paramount, AWS config allows you to do this
• Allows the auditing of an AWS account
• Can view history of an account that has AWS config enabled

Incentivized

• Makes it easy to create and share automation in one central hub.
• Ansible content collections give me the ability to reuse code, making it rapid to carry out complex IT processes.
• Event-driven automation allows me to reduce manual tasks: it is rapid to know which action to take and respond automatically by receiving events from external apps automatically.

• It's only AWS, no third party.
• Not the most intuitive interface, but with a little getting used to it is OK.

Incentivized

• Ansible Tower is a paid service, which can be annoying at times. But that is understandable, as it requires an additional level of support from the Ansible team to develop.
• There is a decently large learning curve for someone not familiar with setting up Unix environments. However, there is a very large support community with tons of documentation, so it's not a dealbreaker.

Incentivized

We are deploying Ansible at all levels of the organization

Incentivized

the yaml is easy to write and most people can be taught to write basic playbooks in a few weeks

Incentivized

Would rate lower for other workloads but for AWS workloads its simple to set up, cost effective and customisable. Primary use case is compliance from a governance perspective.

Incentivized

Out of the box, Ansible can be slow over a bad connection, as it's establishing an SSH connection to the target server for each little task. There are some adjustments you can make to the defaults that greatly improve performance. And if you run Ansible on the same network as the target (i.e. by using a jump box or Jenkins server), then it can be crazy fast. I'd give it a 10 for speed except that it does require these adjustments first.

Incentivized

There is a lot of good documentation that Ansible and Red Hat provide which should help get someone started with making Ansible useful. But once you get to more complicated scenarios, you will benefit from learning from others. I have not used Red Hat support for work with Ansible, but many of the online resources are helpful.

Incentivized

I spoke on this topic today!

Incentivized

I do not know or have used any other product in AWS cloud space that matches what AWS Config provides. We have some custom built monitoring and governance, however that is there because AWS Config does not provide it currently.

Incentivized

AAP doesn't truly stack up against any of the products mentioned except for Aria Automation. But, it is extensible and open and has a lower cost to entry.

Incentivized

• Enforcing audit requirements
• Easy to set up alerting when there are rule breaches
• Auto remediation reduces the manual policing of such breaches

Incentivized

• Red Hat Ansible Automation Platform offers automation and ML tools that allow me to automate complex IT tasks.
• Through automation analytics, it is seamless to gain full visibility into automation performance allowing me to make informed decisions.
• Red Hat Ansible Automation Platform allows me to move rapidly from insights to action.
• Creating and sharing automation content in one place unify a team in one place hence enhancing real-time collaboration.