AWS systems-manager documentation change
Summary
Updated release notes with clarification about unmanaged instances and agent signature verification
Security assessment
The signature verification update documents security features for package integrity but doesn't indicate response to a specific security incident
Diff
diff --git a/systems-manager/latest/userguide/systems-manager-release-history.md index a97d4d696..81aacd1b1 100644 --- a/systems-manager/latest/userguide/systems-manager-release-history.md +++ b/systems-manager/latest/userguide/systems-manager-release-history.md @@ -13 +13,2 @@ Change| Description| Date -Updated topic: Verify the signature of SSM Agent| The AWS Systems Manager Agent (SSM Agent) deb and rpm installer packages for Linux instances are cryptographically signed. You can use a public key to verify that the agent package is original and unmodified. If the files are damaged or have been altered, the verification fails. You can verify the signature of the installer package using either RPM or GPG. The topic includes a new public key for SSM Agent. For more information, see [Verify the signature of SSM Agent](https://docs.aws.amazon.com/systems-manager/latest/userguide/verify-agent-signature.html).| February 14, 2025 +Updated topic: Reviewing node insights| In the [unified console](https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-unified-console.html) for Systems Manager, the **Review node insights** page reports the number of managed and unmanaged EC2 instances in your organization or account. We have clarified that Systems Manager includes an EC2 instance in the "Unmanaged" count when it is in a `Stopped` state. For more information, see [What is an unmanaged instance?](https://docs.aws.amazon.com/systems-manager/latest/userguide/review-node-insights.html#unmanaged-instance-definition).| February 25, 2025 +Updated topic: Verify the signature of SSM Agent| The AWS Systems Manager Agent (SSM Agent) RPM and Debian installer packages for Linux instances are cryptographically signed. You can use a public key to verify that the agent package is original and unmodified. If the files are damaged or have been altered, the verification fails. You can verify the signature of the installer package using either RPM or GPG. The topic includes a new public key for SSM Agent. For more information, see [Verify the signature of SSM Agent](https://docs.aws.amazon.com/systems-manager/latest/userguide/verify-agent-signature.html).| February 14, 2025