# AWS Console for SAP applications
The AWS Console for SAP applications provides a centralized view for managing your SAP applications on AWS. To open the console, search for "AWS for SAP" in the AWS Management Console search bar, or navigate directly to https://console.aws.amazon.com/awsforsap/home.
**Topics**
+ [Console overview](console-overview.md)
+ [Register an application](register-console.md)
+ [Manage SAP applications](manage-console.md)
+ [Run Configuration Checks](configuration-checks-console.md)
# Console overview
The AWS Console for SAP applications provides a summary of all SAP applications registered with Systems Manager for SAP in your account and Region.
## Dashboard
The Dashboard provides an overview of your SAP environment in the current Region, including the registration and discovery status of your applications, running application states, resource usage, and a summary of recent operations.
From the Dashboard, you can choose **Register** to register an existing SAP application, or choose **Launch** to deploy a new application using AWS Launch Wizard for SAP.
## Applications
The Applications page lists all SAP applications registered with Systems Manager for SAP in the current Region. You can search for applications and view the application ID, type, application status, discovery status, and last updated time.
Select an application to view a summary of its details, including the application status, discovery status, ARN, running components, and SAP configuration check status. From the **Actions** menu, you can perform operations such as starting or stopping an application, updating credentials, or running on-demand discovery.
To view the full details and manage an application, choose the application ID to open the application details page. For more information, see [Application details](manage-console.md#application-details).
# Register an application
You can register SAP HANA and SAP ABAP applications using the AWS Console for SAP applications.
**Topics**
+ [Register SAP HANA database](#register-hana)
+ [Register SAP ABAP application](#register-abap)
## Register SAP HANA database
Follow these steps to register an SAP HANA database as a Systems Manager for SAP application.
1. Open the [AWS Console for SAP applications](https://console.aws.amazon.com/awsforsap/home).
1. Choose **Register application**.
1. For Application type, select **SAP HANA**.
1. In **Application details**, enter a name for the application that you want to register.
1. In **SAP HANA workload**, provide details of your workload.
1. **Instance ID** – This is the Amazon EC2 instance ID where your workload is currently running. Choose **Browse instances**, and select the instance ID for your primary SAP HANA workload.
1. **SAP System Identifier (SID)** – This is the SAP System Identifier (`sapsid`) of your SAP HANA instance.
1. **SAP system number** – This is the system number of your SAP HANA instance.
1. **Credentials** – These are the credentials of your database.
**Note**
If you do not see the credentials for the application you want to register in the **Secret ID** drop-down list, ensure that you have registered your credentials with AWS Secrets Manager. For more information, see [Register SAP HANA database credentials in AWS Secrets Manager](https://docs.aws.amazon.com/ssm-sap/latest/userguide/get-started.html#register-secrets).
*Optional* Select **Add credentials** to add credentials for five databases.
1. *Optional* In **Application tags**, you can add 100 tags associated to resources.
1. Choose **Create**.
On registration completion, you can see your application on the **Applications** page. For more information about the application details page, see [Application details](manage-console.md#application-details).
## Register SAP ABAP application
**Important**
You must register the SAP HANA database you want to connect to the SAP ABAP application before registering the SAP ABAP application.
Follow these steps to register either a single node or a multi node (distributed or high availability) SAP ABAP as a Systems Manager for SAP application.
1. Open the [AWS Console for SAP applications](https://console.aws.amazon.com/awsforsap/home).
1. Choose **Register application**.
1. For Application type, select **SAP ABAP**.
1. In **Application details**, enter a name for the application that you want to register.
1. Provide the following details of your workload.
1. **Instance ID** – This is the Amazon EC2 instance ID where your workload is currently running. Choose **Browse instances**, and select the instance ID for your primary SAP ABAP workload.
1. **SAP System Identifier (SID)** – This is the SAP System Identifier (`sapsid`) of your SAP ABAP instance.
1. **SAP HANA database Amazon Resource Name (ARN)** – This is the Amazon Resource Name (ARN) of the SAP HANA database you want to connect to your SAP ABAP application.
+ Select **Browse databases** to choose the database.
+ Select **Register a new application** to register an SAP HANA database to connect to the SAP ABAP application. You can refresh the database list on successful completion of the SAP HANA application.
1. (*Optional*). In **Connected Web Dispatcher components** you can provide the following details of up to 5 of your SAP Web Dispatcher resources that your application is using. SAP Web Dispatcher resources are only discoverable by Systems Manager for SAP after you input these details:
1. **SAP System Identifier (SID)** is the SAP System Identifier (`sapsid`) of your SAP Web Dispatcher resource.
1. **Instance ID** is the Amazon EC2 instance ID on which your SAP Web Dispatcher is currently running. Select **Browse instances** to find the instance ID.
1. (*Optional*). In **Application tags**, you can add 100 tags associated to resources.
1. Choose **Create**.
On registration completion, you can see your application on the **Applications** page. For more information about the application details page, see [Application details](manage-console.md#application-details).
# Manage SAP applications
From the AWS Console for SAP applications, you can view application details, start and stop applications, and monitor operations.
**Topics**
+ [Application details](#application-details)
+ [Start an application](#start-application)
+ [Stop an application](#stop-application)
## Application details
To view the details of a registered application, open the [AWS Console for SAP applications](https://console.aws.amazon.com/awsforsap/home), choose **Applications**, and then choose the application. The application details page contains the following tabs.
**Example**
View the topology of your Systems Manager for SAP application, including type and status. The child components are embedded under parent components. Select each component to view its details. Tenant database details can be viewed from components of type HANA.
View the EC2 instances and EBS volumes associated with your Systems Manager for SAP application.
View a summary of AWS Backup recovery points and backup jobs for your Systems Manager for SAP application. To modify backup schedules or manage backups, choose **Go to AWS Backup** to open the AWS Backup console. This tab is only available for SAP HANA applications.
View system and application tags assigned to your Systems Manager for SAP application as key-value pairs. Choose **Manage user tags** to add, modify, or delete tags.
View the results of previous configuration check evaluations by selecting a check, or choose **Run checks** to perform a new evaluation. For more information, see [Run Configuration Checks](configuration-checks-console.md).
View operations performed on your Systems Manager for SAP application. Select an operation ID to view more details and events associated with that operation.
View cost information for your Systems Manager for SAP application. AWS Cost Explorer uses tags to track your application costs. Choose **Activate application tags** to activate the tags associated with your application. Cost Explorer can take up to 24 hours to report costs after activating tags. For more information, see [Using cost allocation tags](https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html).
Costs are calculated based on the AWS resources used by your application. Keep this in mind when evaluating single-node setups where SAP HANA and SAP ABAP share the same EC2 instance, or other configurations where applications share resources.
## Start an application
Follow these steps to start a Systems Manager for SAP application.
1. Open the [AWS Console for SAP applications](https://console.aws.amazon.com/awsforsap/home).
1. Choose **Applications**, then choose the application that you want to start.
1. Choose **Actions**, then choose **Start application**.
1. Choose **Start**.
You can monitor the task status using the *operation ID* provided in the flash banner or by choosing the **Operations** tab.
## Stop an application
Follow these steps to stop a Systems Manager for SAP application.
1. Open the [AWS Console for SAP applications](https://console.aws.amazon.com/awsforsap/home).
1. Choose **Applications**, then choose the application that you want to stop.
1. Choose **Actions**, then choose **Stop application**.
1. When stopping an SAP HANA application, you can also stop the associated EC2 instance where the SAP HANA application is running.
1. When stopping an SAP ABAP application, you can also stop the connected SAP HANA application, and/or stop the associated EC2 instance where the SAP ABAP and SAP HANA applications are running.
**Note**
You can stop the EC2 instance only if you have selected the option to stop the connected SAP HANA application.
1. Choose **Stop**.
You can monitor the task status using the *operation ID* provided in the flash banner or by choosing the **Operations** tab.
# Run Configuration Checks
Use the following steps to evaluate the SAP configuration of a Systems Manager for SAP application, which is either of type SAP HANA or SAP ABAP.
See also [support restrictions for Systems Manager for SAP](https://docs.aws.amazon.com/ssm-sap/latest/userguide/supported-versions.html).
**Topics**
+ [To access configuration checks](#access-configuration-checks)
+ [To evaluate configuration checks](#evaluate-configuration-checks)
+ [To view and analyze check results](#view-analyze-check-results)
+ [Schedule Configuration Checks using AWS EventBridge Scheduler console](#schedule-configuration-checks-eventbridge)
## To access configuration checks
1. Open the [AWS Console for SAP applications](https://console.aws.amazon.com/awsforsap/home).
1. Choose **Applications**, then choose the SAP application that you want to evaluate.
1. Choose the **SAP configuration checks** tab.
## To evaluate configuration checks
1. Select one or more checks you want to evaluate
1. Choose **Run**
1. Monitor the task status using either the operation ID provided in the notification banner or by choosing **Actions** > **View operations**
## To view and analyze check results
1. Select a single check to view its details
1. Expand individual subchecks to see detailed rules
1. Sort subchecks by Rule Status, Description, or Component
1. Filter results by rule status using the status totals or the filter box
1. Clear filters by selecting the cancel indicator
1. View previous results by selecting a different evaluation date from the dropdown list
1. Access additional information through the provided Documentation links
## Schedule Configuration Checks using AWS EventBridge Scheduler console
1. Sign in to the AWS Management Console, then choose the following link to open the EventBridge Scheduler section of the EventBridge console: https://console.aws.amazon.com/scheduler/home . You can switch your AWS Region by using the AWS Management Console’s Region selector.
1. On the **Schedules** page, choose **Create schedule**.
1. On the **Specify schedule detail** page, in the **Schedule name and description** section, do the following:
1. For **Schedule name**, enter a name for your schedule. For example, `SAPConfigurationChecksSchedule`
1. For **Description - optional**, enter a description for your schedule.
1. For **Schedule group**, choose a schedule group from the drop down options. If you haven’t previously made any schedule groups, you can choose the `default` group for your schedule. To create a new schedule group, choose the **create your own schedule** link in the console description. You use schedule groups to add tags to groups of schedules.
1. In the **Schedule pattern** section, do the following:
1. For **Occurrence**, choose one of the following pattern options. The configuration options change depending on which pattern that you select.
1. **One-time schedule** – A one-time schedule invokes a target only once at the date and time that you specify. For **Date and time**, enter a valid date in `YYYY/MM/DD` format. Then, specify a timestamp in 24-hour `hh:mm` format. Finally, choose a timezone from the drop down options.
1. **Recurring schedule** – A recurring schedule invokes a target at a rate that you specify using a **cron** expression or rate expression. Choose **Cron-based schedule** to configure a schedule by using a **cron** expression. To use a rate expression, choose **Rate-based schedule** and enter a positive number for **Value**, then choose a **Unit** from the drop down options.
For more information on using cron and rate expressions, see [Schedule types in EventBridge Scheduler](https://docs.aws.amazon.com/scheduler/latest/UserGuide/schedule-types.html).
1. For **Flexible time window**, choose **Off** to turn off the option, or choose one of the pre-defined time windows from the drop down list. For example, if you choose **15 minutes** and you set a recurring schedule to invoke its target once every hour, the schedule runs within 15 minutes after the start of every hour.
1. If you chose **Recurring schedule** in the previous step, in the **Timeframe** section, specify a timezone, and optionally set a start date and time, and an end date and time for the schedule. A recurring schedule without a start date will begin as soon as it is created and available. A recurring schedules without an end date will continue to invoke it’s target indefinitely.
1. Choose **Next**.
1. On the **Select target** page, do the following:
1. Select **All APIs** option, and Find service "Systems Manager for SAP" from the search box.
1. Find the **Target** action "StartConfigurationChecks" and provide the json payload based on the [StartConfigurationChecks API](https://docs.aws.amazon.com/ssmsap/latest/APIReference/API_StartConfigurationChecks.html) action (ApplicationId string input, and optionally, ConfigurationCheckIds array string)
1. Choose **Next**, then on the **Settings - optional** page, follow the steps described in [EventBridge console Getting Started guide](https://docs.aws.amazon.com/scheduler/latest/UserGuide/getting-started.html#getting-started-console) (Step 9 onwards), to change the default settings of the desired schedule.
1. In the Permissions section, in order for the Scheduler to execute the StartConfigurationCheck operation successfully, an IAM role needs to be created with the AWSSystemsManagerForSAPFullAccess managed policy, using the steps below:
1. In the AWS IAM Console, Create a new role, using a “Custom trust Policy“, and the following trust relationship:
```
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Principal": {
"Service": "scheduler.amazonaws.com"
},
"Action": "sts:AssumeRole"
}
]
}
```
1. On the Next page, Add Permissions by searching for and selecting the AWSSystemsManagerForSAPFullAccess managed policy
1. Next, provide the Role name and Description, (and tags if any), before creating the role for the scheduler.
1. Select this new Role in the Permissions section of the schedule on the AWS EventBridge Console, while creating the schedule
1. Choose **Create schedule** to finish creating your new schedule. You can view a list of your new and existing schedules on the **Schedules** page. Under the **Status** column, verify that your new schedule is **Enabled**.
1. To verify that your schedule invokes the Systems Manager for SAP service’s StartConfigurationChecks target, follow the steps listed at [To view and analyze check results](#view-analyze-check-results).