AWS systems-manager high security documentation change

Service: systems-manager · 2025-06-19 · Security-related high

File: systems-manager/latest/userguide/configuring-maintenance-window-permissions-console.md

Summary

Changed IAM resource from wildcard to specific role ARN

Security assessment

Reduces potential over-privileging by specifying exact resource ARN instead of wildcard

Diff

diff --git a/systems-manager/latest/userguide/configuring-maintenance-window-permissions-console.md b/systems-manager/latest/userguide/configuring-maintenance-window-permissions-console.md
index 8c01043d4..086cbe58d 100644
--- a//systems-manager/latest/userguide/configuring-maintenance-window-permissions-console.md
+++ b//systems-manager/latest/userguide/configuring-maintenance-window-permissions-console.md
@@ -99 +99 @@ Maintenance window tasks require an IAM role to provide the permissions required
-                "Resource": "*",
+                "Resource": "arn:aws:iam::account-id:role/maintenance-window-role-name",