AWS systems-manager documentation change

Service: systems-manager · 2025-04-11 · Documentation low

File: systems-manager/latest/userguide/automation-action-executeScript.md

Summary

Updated script examples (Python and PowerShell) with runtime version bumps, added logging statements, output definitions, and IAM role description formatting changes

Security assessment

Changes involve example script updates and output parameter additions without any explicit security context or vulnerability references. The Python 3.8→3.11 update could include security improvements but isn't explicitly stated.

Diff

diff --git a/systems-manager/latest/userguide/automation-action-executeScript.md b/systems-manager/latest/userguide/automation-action-executeScript.md
index 500538754..1dd6bd3ed 100644
--- a//systems-manager/latest/userguide/automation-action-executeScript.md
+++ b//systems-manager/latest/userguide/automation-action-executeScript.md
@@ -159 +159 @@ Python
-            Runtime: "python3.8"
+            Runtime: "python3.11"
@@ -172 +172 @@ Python
-                    "Value": "Example"
+                    "Value": "ExamplePython"
@@ -173,0 +174 @@ Python
+                print(f"Adding tag {tag} to instance id {instanceId}")
@@ -177,0 +179,7 @@ Python
+                return tag
+        outputs:
+          - Type: String
+            Name: TagKey
+            Selector: $.Payload.Key
+    outputs:
+      - tagInstance.TagKey
@@ -189 +197 @@ PowerShell
-            description: '(Required) The Amazon Resource Name (ARN) of the IAM role that allows Automation to perform the actions on your behalf. If no role is specified, Systems Manager Automation uses your IAM permissions to operate this runbook.'
+        description: (Required) The Amazon Resource Name (ARN) of the IAM role that allows Automation to perform the actions on your behalf. If no role is specified, Systems Manager Automation uses your IAM permissions to operate this runbook.
@@ -195 +203,2 @@ PowerShell
-        action: 'aws:executeScript'
+        action: aws:executeScript
+        isEnd: true
@@ -208 +217 @@ PowerShell
-              $tag.Value = "Example"
+            $tag.Value = "ExamplePowerShell"
@@ -209,0 +219 @@ PowerShell
+            Write-Information "Adding tag key: $($tag.Key) and value: $($tag.Value) to instance id $($input.instanceId)"
@@ -211,0 +222,8 @@ PowerShell
+            return $tag
+        outputs:
+          - Type: String
+            Name: TagKey
+            Selector: $.Payload.Key
+    outputs:
+      - tagInstance.TagKey
+