AWS systems-manager documentation change
Summary
Added PowerShell V5 example for starting automation execution with assume role parameter
Security assessment
Demonstrates use of AutomationAssumeRole parameter which relates to security through role delegation, but does not fix a vulnerability
Diff
diff --git a/systems-manager/latest/userguide/example_ssm_StartAutomationExecution_section.md b/systems-manager/latest/userguide/example_ssm_StartAutomationExecution_section.md index a837fffca..09d647979 100644 --- a//systems-manager/latest/userguide/example_ssm_StartAutomationExecution_section.md +++ b//systems-manager/latest/userguide/example_ssm_StartAutomationExecution_section.md @@ -78,0 +79,19 @@ PowerShell +**Tools for PowerShell V5** + + +**Example 1: This example runs a document specifying an Automation role, an AMI source ID, and an Amazon EC2 instance role.** + + + Start-SSMAutomationExecution -DocumentName AWS-UpdateLinuxAmi -Parameter @{'AutomationAssumeRole'='arn:aws:iam::123456789012:role/SSMAutomationRole';'SourceAmiId'='ami-f173cc91';'InstanceIamRole'='EC2InstanceRole'} + + +**Output:** + + + 3a532a4f-0382-11e7-9df7-6f11185f6dd1 + + * For API details, see [StartAutomationExecution](https://docs.aws.amazon.com/powershell/v5/reference) in _AWS Tools for PowerShell Cmdlet Reference (V5)_. + + + +