AWS systems-manager documentation change
Summary
Updated account ID in IAM role ARNs and resource formatting
Security assessment
Policy example cleanup with concrete account ID. No evidence of security feature addition or vulnerability fix.
Diff
diff --git a/systems-manager/latest/userguide/configuring-fleet-manager-permissions.md b/systems-manager/latest/userguide/configuring-fleet-manager-permissions.md index b8b5a67f6..5a24f164e 100644 --- a//systems-manager/latest/userguide/configuring-fleet-manager-permissions.md +++ b//systems-manager/latest/userguide/configuring-fleet-manager-permissions.md @@ -99 +99 @@ JSON - "Resource": "arn:aws:ssm:region:account-id:servicesetting/ssm/managed-instance/default-ec2-instance-management-role" + "Resource": "arn:aws:ssm:us-east-1:account-id:servicesetting/ssm/managed-instance/default-ec2-instance-management-role" @@ -106 +106 @@ JSON - "Resource": "arn:aws:iam::account-id:role/service-role/AWSSystemsManagerDefaultEC2InstanceManagementRole", + "Resource": "arn:aws:iam::111122223333:role/service-role/AWSSystemsManagerDefaultEC2InstanceManagementRole", @@ -124,3 +124,3 @@ JSON - "arn:aws:ec2:*:account-id:instance/*", - "arn:aws:ssm:*:account-id:managed-instance/*", - "arn:aws:ssm:*:account-id:document/SSM-SessionManagerRunShell", + "arn:aws:ec2:*:111122223333:instance/*", + "arn:aws:ssm:*:111122223333:managed-instance/*", + "arn:aws:ssm:*:111122223333:document/SSM-SessionManagerRunShell", @@ -228,3 +228,3 @@ JSON - "arn:aws:ec2:*:account-id:instance/*", - "arn:aws:ssm:*:account-id:managed-instance/*", - "arn:aws:ssm:*:account-id:document/SSM-SessionManagerRunShell", + "arn:aws:ec2:*:111122223333:instance/*", + "arn:aws:ssm:*:111122223333:managed-instance/*", + "arn:aws:ssm:*:111122223333:document/SSM-SessionManagerRunShell",