AWS systems-manager documentation change
Summary
Added 'ssm:DescribeInstanceInformation' permission to Maintenance Window task IAM role requirements
Security assessment
The addition of DescribeInstanceInformation expands IAM permissions but doesn't explicitly address a security vulnerability. This appears to be a routine documentation update for completeness.
Diff
diff --git a/systems-manager/latest/userguide/configuring-maintenance-window-permissions-console.md b/systems-manager/latest/userguide/configuring-maintenance-window-permissions-console.md index 8a829c404..8c01043d4 100644 --- a//systems-manager/latest/userguide/configuring-maintenance-window-permissions-console.md +++ b//systems-manager/latest/userguide/configuring-maintenance-window-permissions-console.md @@ -51,0 +52 @@ Maintenance window tasks require an IAM role to provide the permissions required + "ssm:DescribeInstanceInformation",