AWS systems-manager medium security documentation change

Service: systems-manager · 2025-08-16 · Security-related medium

File: systems-manager/latest/userguide/cross-service-confused-deputy-prevention.md

Summary

Modified example ARN formats for SourceArn and KMS resources

Security assessment

Corrects ARN patterns used in confused deputy prevention policies. Incorrect ARN formats could lead to misconfigured security policies allowing unintended access.

Diff

diff --git a/systems-manager/latest/userguide/cross-service-confused-deputy-prevention.md b/systems-manager/latest/userguide/cross-service-confused-deputy-prevention.md
index 86bc9cfaf..e5b5bbec3 100644
--- a//systems-manager/latest/userguide/cross-service-confused-deputy-prevention.md
+++ b//systems-manager/latest/userguide/cross-service-confused-deputy-prevention.md
@@ -43 +43 @@ JSON
-                   "aws:SourceArn":"arn:aws:ssm:us-east-2:123456789012:*"
+                   "aws:SourceArn":"us-east-1:123456789012:*"
@@ -75 +75 @@ JSON
-                "Resource": "arn:aws:kms:us-east-2:123456789012:key/KMS_key_id",
+                "Resource": "arn:aws:kms:us-east-1:123456789012:key/KMS_key_id",