AWS systems-manager medium security documentation change
Summary
Added documentation about enhanced RDP recording configurations for just-in-time node access, including KMS encryption requirements for S3 buckets and a new 'ProcessingError' recording status
Security assessment
The change explicitly addresses security controls by requiring KMS key access for encryption of recordings and documents potential permission/service dependency failures through the new ProcessingError status. This directly relates to data protection and access control security practices.
Diff
diff --git a/systems-manager/latest/userguide/systems-manager-release-history.md b/systems-manager/latest/userguide/systems-manager-release-history.md index e1d563f64..67df0c619 100644 --- a//systems-manager/latest/userguide/systems-manager-release-history.md +++ b//systems-manager/latest/userguide/systems-manager-release-history.md @@ -12,0 +13 @@ Change| Description| Date +Enhanced RDP recording for just-in-time node access| AWS Systems Manager just-in-time node access now provides additional information about RDP recording configurations. When using AWS KMS encryption on S3 buckets where recordings are stored, you must provide access to the KMS key used for bucket encryption to the `ssm-guiconnect` service principal. This release also introduces a new recording status, `ProcessingError`, which indicates intermediate failures during video processing that could be due to service dependency failures or missing permissions.For more information, see [Recording RDP connections](https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-just-in-time-node-access-rdp-recording.html).| June 13, 2025