AWS systems-manager documentation change
Summary
Added entries about IAM policy updates, new data perimeters documentation, and new Quick Setup managed policies
Security assessment
The changes document updates to IAM policies (including permissions for Automation runbooks and policy attachments) and introduce new security-related topics like data perimeters. These updates clarify security controls but do not explicitly address a disclosed vulnerability or incident.
Diff
diff --git a/systems-manager/latest/userguide/systems-manager-release-history.md b/systems-manager/latest/userguide/systems-manager-release-history.md index d07bd909a..cbc584ffd 100644 --- a//systems-manager/latest/userguide/systems-manager-release-history.md +++ b//systems-manager/latest/userguide/systems-manager-release-history.md @@ -12,0 +13,4 @@ Change| Description| Date +Updates for the AWSQuickSetupDeploymentRolePolicy managed policy| Systems Manager has updated the `AWSQuickSetupDeploymentRolePolicy` managed policy to grant association-related permissions to additional `AWSQuickSetupType-*` Automation runbooks and to allow Quick Setup to attach and detach additional IAM policies. In addition, we have updated the documentation for `AWSQuickSetupDeploymentRolePolicy` to provide more detailed descriptions of the permissions granted for Quick Setup configuration management operations. For information, see [Systems Manager updates to AWS managed policies](https://docs.aws.amazon.com/systems-manager/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates).| August 12, 2025 +New topic: Data perimeters in AWS Systems Manager| You can configure data perimeter policies for AWS service-owned resources that Systems Manager accesses. [Data perimeters in AWS Systems Manager](https://docs.aws.amazon.com/systems-manager/latest/userguide/data-perimeters.html) describes the purpose of the Systems Manager managed `ssm-document-categories-`region`` S3 bucket. This bucket contains metadata about document categories that help organize and classify SSM Documents in the console.| August 12, 2025 +New managed policy for Quick Setup scheduler: AWSQuickSetupStartStopInstancesExecutionPolicy| Systems Manager has released a new managed policy, `AWSQuickSetupStartStopInstancesExecutionPolicy`, that provides permissions for Quick Setup to start and stop Amazon EC2 instances on a schedule. For information, see [Systems Manager updates to AWS managed policies](https://docs.aws.amazon.com/systems-manager/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates).| August 12, 2025 +New AWS managed policy for Quick Setup: AWSQuickSetupStartSSMAssociationsExecutionPolicy| Systems Manager has released a new managed policy `AWSQuickSetupStartSSMAssociationsExecutionPolicy` that allows Quick Setup to run the `AWSQuickSetupType-StartSSMAssociations` Automation runbook. For information, see [Systems Manager updates to AWS managed policies](https://docs.aws.amazon.com/systems-manager/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates).| August 12, 2025