AWS systems-manager documentation change
Summary
Added multiple new IAM policies and updated existing ones related to just-in-time node access functionality
Security assessment
Documents new security features (JIT node access controls, approval workflows, and token management) but does not indicate remediation of a specific security vulnerability. These are enhancements to security documentation for access management features.
Diff
diff --git a/systems-manager/latest/userguide/security-iam-awsmanpol.md b/systems-manager/latest/userguide/security-iam-awsmanpol.md index 73a1d8114..5ddc301e2 100644 --- a//systems-manager/latest/userguide/security-iam-awsmanpol.md +++ b//systems-manager/latest/userguide/security-iam-awsmanpol.md @@ -1165 +1165,11 @@ Change | Description | Date -AWSSystemsManagerJustInTimeNodeAccessRolePropagationPolicy – Update to an policy | Systems Manager added permissions to allow Systems Manager to tag a resource shared by for just-in-time node access. | April 30th, 2025 +AWSQuickSetupDeploymentRolePolicy – Update to a policy | Systems Manager added permissions to the managed policy `AWSQuickSetupDeploymentRolePolicy` for accessing the Amazon owned runbook [AWSQuickSetupType-ManageInstanceProfile](https://console.aws.amazon.com/systems-manager/documents/AWSQuickSetupType-ManageInstanceProfile/content). This permission makes it possible for Quick Setup to create associations using the managed policy instead of inline policies. | June 10, 2025 +AWSSystemsManagerJustInTimeNodeAccessRolePropagationPolicy – Update to an policy | Systems Manager added permissions to allow Systems Manager to tag a resource shared by AWS Resource Access Manager for just-in-time node access. | April 30th, 2025 +AWSQuickSetupManageJITNAResourcesExecutionPolicy – Update to a policy | Systems Manager added permissions to allow Systems Manager to tag IAM roles created for just-in-time node access. | April 30th, 2025 +AWSSystemsManagerJustInTimeAccessTokenSessionPolicy – New policy | Systems Manager added a new policy to allow Systems Manager to apply scoped down permissions to a just-in-time node access token. | April 30th, 2025 +AWSSystemsManagerNotificationsServicePolicy – New policy | Systems Manager added a new policy to allow Systems Manager to send email notifications for just-in-time node access requests to access request approvers. | April 30th, 2025 +AWSSystemsManagerJustInTimeNodeAccessRolePropagationPolicy – New policy | Systems Manager added a new policy to allow Systems Manager to replicate approval policies to different Regions. | April 30th, 2025 +AWSSystemsManagerJustInTimeAccessTokenPolicy – New policy | Systems Manager added a new policy to allow Systems Manager to generate access tokens used for just-in-time node access. | April 30th, 2025 +AWSSystemsManagerJustInTimeAccessServicePolicy – New policy | Systems Manager added a new policy to provide permissions to AWS resources managed or used by the Systems Manager just-in-time node access feature. | April 30th, 2025 +AWSQuickSetupManageJITNAResourcesExecutionPolicy – New policy | Systems Manager added a new policy to allow Quick Setup, a tool in Systems Manager, to create the IAM roles necessary for just-in-time node access. | April 30th, 2025 +AWSQuickSetupJITNADeploymentRolePolicy – New policy | Systems Manager added a new policy that provides permissions that allow Quick Setup to deploy the configuration type required to set up just-in-time node access. | April 30th, 2025 +AWSSystemsManagerJustInTimeNodeAccessRolePropagationPolicy – Update to an policy | Systems Manager added permissions to allow Systems Manager to tag a resource shared by AWS Resource Access Manager for just-in-time node access. | April 30th, 2025