The primary benefit of using AWS Systems Manager Session Manager over traditional SSH or RDP is enhanced security through the elimination of inbound open ports and static credentials.
In AWS CloudFormation, a Change Set is a "preview" of the actions CloudFormation will take before you actually apply an update to your stack.
A CloudFormation stack is a collection of AWS resources that you manage as a single unit.
1. SSM Agent Installed and Running
2. IAM Role (Instance Profile)
3. Network Connectivity
By default, when a resource creation fails during the creation of a new stack, AWS CloudFormation triggers an automatic rollback.
This behavior is designed to ensure that you don't leave "dangling" resources or a half-finished environment, which could lead to security vulnerabilities or unexpected costs.