AWS systems-manager documentation change
Summary
Reorganized content about 'noexec' mount issue, added execution history retention details and related information links
Security assessment
Added execution history retention section documents security-adjacent logging capabilities (CloudTrail/S3) but doesn't address vulnerabilities. The 'noexec' note is operational guidance without security context.
Diff
diff --git a/systems-manager/latest/userguide/running-commands.md b/systems-manager/latest/userguide/running-commands.md index ffe0d9f76..0fd19fc11 100644 --- a//systems-manager/latest/userguide/running-commands.md +++ b//systems-manager/latest/userguide/running-commands.md @@ -9,5 +9 @@ This section includes information about how to send commands from the AWS System -###### Important - -If your node is configured with the `noexec` mount option for the `var` directory, Run Command is unable to successfuly run commands. - -For information about how to send commands using Windows PowerShell, see [Walkthrough: Use the AWS Tools for Windows PowerShell with Run Command](./walkthrough-powershell.html) or the examples in the [AWS Systems Manager section of the AWS Tools for PowerShell Cmdlet Reference](https://docs.aws.amazon.com/powershell/latest/reference/items/AWS_Systems_Manager_cmdlets.html). For information about how to send commands using the AWS Command Line Interface (AWS CLI), see the [Walkthrough: Use the AWS CLI with Run Command](./walkthrough-cli.html) or the examples in the [SSM CLI Reference](https://docs.aws.amazon.com/cli/latest/reference/ssm/). +Note that if your node is configured with the `noexec` mount option for the var directory, Run Command is unable to successfuly run commands. @@ -20,0 +17,15 @@ For more information, see [Restricting access to Parameter Store parameters usin +###### Execution history retention + +The history of each command is available for up to 30 days. In addition, you can store a copy of all log files in Amazon Simple Storage Service or have an audit trail of all API calls in AWS CloudTrail. + +###### Related information + +For information about sending commands using other tools, see the following topics: + + * [Walkthrough: Use the AWS Tools for Windows PowerShell with Run Command](./walkthrough-powershell.html) or the examples in the [AWS Systems Manager section of the AWS Tools for PowerShell Cmdlet Reference](https://docs.aws.amazon.com/powershell/latest/reference/items/AWS_Systems_Manager_cmdlets.html). + + * [Walkthrough: Use the AWS CLI with Run Command](./walkthrough-cli.html) or the examples in the [SSM CLI Reference](https://docs.aws.amazon.com/cli/latest/reference/ssm/) + + + +