AWS systems-manager documentation change
Summary
Updated document ARNs to use account placeholder and added JSON formatting blocks
Security assessment
Changed from explicit account numbers to 'region::' placeholder format but doesn't address specific security vulnerabilities. Formatting changes without security context.
Diff
diff --git a/systems-manager/latest/userguide/change-manager-organization-setup.md b/systems-manager/latest/userguide/change-manager-organization-setup.md index a7d2d0cd1..637d15257 100644 --- a//systems-manager/latest/userguide/change-manager-organization-setup.md +++ b//systems-manager/latest/userguide/change-manager-organization-setup.md @@ -134,0 +135,6 @@ This example isn't comprehensive. Additional permissions might be needed for wor +JSON + + +**** + + @@ -158,2 +164,2 @@ This example isn't comprehensive. Additional permissions might be needed for wor - "arn:aws:ssm:region:123456789012:document/MyFirstDBChangeTemplate", - "arn:aws:ssm:region:123456789012:document/MySecondDBChangeTemplate" + "arn:aws:ssm:region::document/MyFirstDBChangeTemplate", + "arn:aws:ssm:region::document/MySecondDBChangeTemplate" @@ -170 +176 @@ This example isn't comprehensive. Additional permissions might be needed for wor - "Resource": "arn:aws:ssm:region:123456789012:automation-definition/*:*" + "Resource": "arn:aws:ssm:region::automation-definition/*:*"