AWS systems-manager documentation change

Service: systems-manager · 2025-06-19 · Documentation medium

File: systems-manager/latest/userguide/security-iam-awsmanpol.md

Summary

Added documentation for numerous AWS managed policies

Security assessment

Documents multiple new security-related policies including permissions boundaries and execution roles, but doesn't address specific vulnerabilities

Diff

diff --git a/systems-manager/latest/userguide/security-iam-awsmanpol.md b/systems-manager/latest/userguide/security-iam-awsmanpol.md
index 5ddc301e2..6ff3713e0 100644
--- a//systems-manager/latest/userguide/security-iam-awsmanpol.md
+++ b//systems-manager/latest/userguide/security-iam-awsmanpol.md
@@ -16,0 +17,87 @@ For more information, see [AWS managed policies](https://docs.aws.amazon.com/IAM
+###### Topics
+
+  * AWS managed policy: AmazonSSMServiceRolePolicy
+
+  * AWS managed policy: AmazonSSMReadOnlyAccess
+
+  * AWS managed policy: AWSSystemsManagerOpsDataSyncServiceRolePolicy
+
+  * AWS managed policy: AmazonSSMManagedEC2InstanceDefaultPolicy
+
+  * AWS managed policy: SSMQuickSetupRolePolicy
+
+  * AWS managed policy: AWSQuickSetupDeploymentRolePolicy
+
+  * AWS managed policy: AWSQuickSetupPatchPolicyDeploymentRolePolicy
+
+  * AWS managed policy: AWSQuickSetupPatchPolicyBaselineAccess
+
+  * AWS managed policy: AWSSystemsManagerEnableExplorerExecutionPolicy
+
+  * AWS managed policy: AWSSystemsManagerEnableConfigRecordingExecutionPolicy
+
+  * AWS managed policy: AWSQuickSetupDevOpsGuruPermissionsBoundary
+
+  * AWS managed policy: AWSQuickSetupDistributorPermissionsBoundary
+
+  * AWS managed policy: AWSQuickSetupSSMHostMgmtPermissionsBoundary
+
+  * AWS managed policy: AWSQuickSetupPatchPolicyPermissionsBoundary
+
+  * AWS managed policy: AWSQuickSetupSchedulerPermissionsBoundary
+
+  * AWS managed policy: AWSQuickSetupCFGCPacksPermissionsBoundary
+
+  * AWS managed policy: AWS-SSM-DiagnosisAutomation-AdministrationRolePolicy
+
+  * AWS managed policy: AWS-SSM-DiagnosisAutomation-ExecutionRolePolicy
+
+  * AWS managed policy: AWS-SSM-RemediationAutomation-AdministrationRolePolicy
+
+  * AWS managed policy: AWS-SSM-RemediationAutomation-ExecutionRolePolicy
+
+  * AWS managed policy: AWSQuickSetupSSMManageResourcesExecutionPolicy
+
+  * AWS managed policy: AWSQuickSetupSSMLifecycleManagementExecutionPolicy
+
+  * AWS managed policy: AWSQuickSetupSSMDeploymentRolePolicy
+
+  * AWS managed policy: AWSQuickSetupSSMDeploymentS3BucketRolePolicy
+
+  * AWS managed policy: AWSQuickSetupEnableDHMCExecutionPolicy
+
+  * AWS managed policy: AWSQuickSetupEnableAREXExecutionPolicy
+
+  * AWS managed policy: AWSQuickSetupManagedInstanceProfileExecutionPolicy
+
+  * AWS managed policy: AWSQuickSetupFullAccess 
+
+  * AWS managed policy: AWSQuickSetupReadOnlyAccess
+
+  * AWS managed policy: AWSQuickSetupManageJITNAResourcesExecutionPolicy
+
+  * AWS managed policy: AWSQuickSetupJITNADeploymentRolePolicy
+
+  * AWS managed policy: AWSSystemsManagerJustInTimeAccessServicePolicy
+
+  * AWS managed policy: AWSSystemsManagerJustInTimeAccessTokenPolicy
+
+  * AWS managed policy: AWSSystemsManagerJustInTimeAccessTokenSessionPolicy
+
+  * AWS managed policy: AWSSystemsManagerJustInTimeNodeAccessRolePropagationPolicy
+
+  * AWS managed policy: AWSSystemsManagerNotificationsServicePolicy
+
+  * AWS managed policy: AWS-SSM-Automation-DiagnosisBucketPolicy
+
+  * AWS managed policy: AWS-SSM-RemediationAutomation-OperationalAccountAdministrationRolePolicy
+
+  * AWS managed policy: AWS-SSM-DiagnosisAutomation-OperationalAccountAdministrationRolePolicy
+
+  * Systems Manager updates to AWS managed policies
+
+  * Additional managed policies for Systems Manager
+
+
+
+