SSM run command + schedule = State manager Basically to keep your fleet in a desired state by running commands Keep the port 22 always closed, antivirus must be enabled.