AWS systems-manager medium security documentation change
Summary
Clarified installation instructions for hybrid environments and added requirement to use new Activation Code/ID when reregistering machines
Security assessment
Requiring new activation credentials when reregistering machines prevents reuse of potentially compromised credentials, addressing a potential security vulnerability in credential reuse
Diff
diff --git a/systems-manager/latest/userguide/hybrid-multicloud-ssm-agent-install-windows.md index 62d349fde..7df356a9a 100644 --- a/systems-manager/latest/userguide/hybrid-multicloud-ssm-agent-install-windows.md +++ b/systems-manager/latest/userguide/hybrid-multicloud-ssm-agent-install-windows.md @@ -9 +9 @@ Setting up private key auto rotationDeregister and reregister a managed node (Wi -This topic describes how to install SSM Agent on Windows Server machines for a [hybrid and multicloud](./operating-systems-and-machine-types.html#supported-machine-types) environment. If you plan to use non-EC2 Linux machines in a hybrid and multicloud environment, see the previous step, [Install SSM Agent on hybrid Linux nodes](./hybrid-multicloud-ssm-agent-install-linux.html). +This topic describes how to install AWS Systems Manager SSM Agent on Windows Server machines in a [hybrid and multicloud](./operating-systems-and-machine-types.html#supported-machine-types) environment. For information about installing SSM Agent on EC2 instances for Windows Server, see [Manually installing and uninstalling SSM Agent on EC2 instances for Windows Server](./manually-install-ssm-agent-windows.html). @@ -11,5 +11 @@ This topic describes how to install SSM Agent on Windows Server machines for a [ -###### Important - -This procedure is for non-EC2 (Amazon Elastic Compute Cloud) machines in hybrid and multicloud environment. To download and install SSM Agent on an EC2 instance for Windows Server, see [Manually installing and uninstalling SSM Agent on EC2 instances for Windows Server](./manually-install-ssm-agent-windows.html). - -Before you begin, locate the Activation Code and Activation ID that were sent to you after you completed the hybrid activation earlier in [Create a hybrid activation to register nodes with Systems Manager](./hybrid-activation-managed-nodes.html). You specify the Code and ID in the following procedure. +Before you begin, locate the Activation Code and Activation ID that were generated during the hybrid activation process, as described in [Create a hybrid activation to register nodes with Systems Manager](./hybrid-activation-managed-nodes.html). You specify the Code and ID in the following procedure. @@ -154,2 +149,0 @@ To remove the remaining registration information for the agent, remove the `Iden -You can reregister a machine after you deregister it. Use the following procedure to reregister a machine as a managed node. After you complete the procedure, your managed node is displayed again in the list of managed nodes. - @@ -157,0 +152,2 @@ You can reregister a machine after you deregister it. Use the following procedur +You can reregister a machine after you deregister it. However, you must use a different Activation Code and Activation ID than were used previously to register the machine. +