AWS systems-manager documentation change

Service: systems-manager · 2025-07-16 · Documentation low

File: systems-manager/latest/userguide/getting-started-restrict-access-examples.md

Summary

Added JSON formatting markers and replaced specific instance ID examples with empty placeholders

Security assessment

Changes involve formatting improvements and removal of specific example values. While this improves policy examples, there's no evidence of addressing security vulnerabilities or adding new security features.

Diff

diff --git a/systems-manager/latest/userguide/getting-started-restrict-access-examples.md b/systems-manager/latest/userguide/getting-started-restrict-access-examples.md
index 5ad5f07e8..11f6f80b4 100644
--- a//systems-manager/latest/userguide/getting-started-restrict-access-examples.md
+++ b//systems-manager/latest/userguide/getting-started-restrict-access-examples.md
@@ -31,0 +32,6 @@ To use this policy, replace each `example resource placeholder` with your own in
+JSON
+    
+
+****
+    
+    
@@ -61,0 +69,6 @@ For federated users, see Example 4: Allow a user to end only sessions they start
+JSON
+    
+
+****
+    
+    
@@ -104,0 +119,6 @@ You can restrict access to managed nodes based on specific tags. In the followin
+JSON
+    
+
+****
+    
+    
@@ -153,0 +175,6 @@ You can create IAM policies that allow a user to start sessions to managed nodes
+JSON
+    
+
+****
+    
+    
@@ -212,0 +241,6 @@ This method doesn't work for accounts that grant access to AWS using federated I
+JSON
+    
+
+****
+    
+    
@@ -252,0 +288,6 @@ With this tag key, you include the managed node ID as the value in policy. In th
+JSON
+    
+
+****
+    
+    
@@ -266 +307 @@ With this tag key, you include the managed node ID as the value in policy. In th
-                            "i-02573cafcfEXAMPLE"
+                            ""
@@ -283,0 +326,6 @@ The following example demonstrates a policy for cases where the caller type is `
+JSON
+    
+
+****
+    
+    
@@ -313,0 +363,6 @@ To retrieve the role ID for a role in your AWS account, use the `get-caller-iden
+JSON
+    
+
+****
+    
+    
@@ -342,0 +399,6 @@ You can also create IAM policies that allow a user to end sessions that are tagg
+JSON
+    
+
+****
+    
+    
@@ -356 +418 @@ You can also create IAM policies that allow a user to end sessions that are tagg
-                      "i-02573cafcfEXAMPLE"
+                      ""
@@ -371,0 +435,6 @@ The following IAM policy allows a user to fully interact with all managed nodes
+JSON
+    
+
+****
+    
+