AWS Security ChangesHomeSearch

AWS systems-manager documentation change

Service: systems-manager · 2025-07-01 · Documentation low

File: systems-manager/latest/userguide/Explorer-resource-data-sync-multiple-accounts-and-regions.md

Summary

Added opt-in Region support details and delegated administrator limitations for opt-in Regions

Security assessment

Focuses on regional availability and feature limitations rather than security controls. Mentions administrative account requirements but doesn't address vulnerabilities.

Diff

diff --git a/systems-manager/latest/userguide/Explorer-resource-data-sync-multiple-accounts-and-regions.md b/systems-manager/latest/userguide/Explorer-resource-data-sync-multiple-accounts-and-regions.md
index 08493711c..2de3d871d 100644
--- a//systems-manager/latest/userguide/Explorer-resource-data-sync-multiple-accounts-and-regions.md
+++ b//systems-manager/latest/userguide/Explorer-resource-data-sync-multiple-accounts-and-regions.md
@@ -35,0 +36,12 @@ Note the following important information about multiple account and Region resou
+  * Most AWS Regions are active by default for your AWS account, but certain Regions are activated only when you manually select them. These Regions are known as [opt-in Regions](https://docs.aws.amazon.com/global-infrastructure/latest/regions/aws-regions.html#regions-opt-in-status). By default, Explorer cross-account/cross-Region resource data syncs don't support data aggregation in opt-in Regions. Support was added for the following opt-in Regions on June 30, 2025. 
+
+    * Europe (Milan)
+
+    * Africa (Cape Town)
+
+    * Middle East (Bahrain)
+
+    * Asia Pacific (Hong Kong)
+
+Note that you can't use a delegated administrator account to create a resource data sync in opt-in Regions. You must use an AWS Organizations management account.
+