AWS systems-manager medium security documentation change
Summary
Added explicit warning about security vulnerabilities when using EC2 installation methods on non-EC2 systems and redirected users to hybrid installation tool
Security assessment
Explicitly states that using EC2 installation procedures on non-EC2 systems can create security vulnerabilities and emphasizes using the ssm-setup-cli tool for security protections. This directly addresses potential misconfiguration risks.
Diff
diff --git a/systems-manager/latest/userguide/manually-install-ssm-agent-linux.md b/systems-manager/latest/userguide/manually-install-ssm-agent-linux.md index 10a68e365..d570f8db3 100644 --- a//systems-manager/latest/userguide/manually-install-ssm-agent-linux.md +++ b//systems-manager/latest/userguide/manually-install-ssm-agent-linux.md @@ -10,0 +11,6 @@ Before you manually install AWS Systems Manager Agent (SSM Agent) on an Amazon E +###### Installation on other machine types + +The procedures in this section are designed specifically for Amazon EC2 instances. For on-premises servers, virtual machines, or other non-EC2 environments, use the `ssm-setup-cli` tool as described in [How to install the SSM Agent on hybrid Linux nodes](./hybrid-multicloud-ssm-agent-install-linux.html). + +Using EC2 installation procedures on non-EC2 systems can potentially result in security vulnerabilities. The `ssm-setup-cli` tool provides additional security protections for non-EC2 machines. + @@ -23,4 +28,0 @@ SSM Agent is preinstalled on some Amazon Machine Images (AMIs) provided by AWS. -###### Installation on other machine types - -If you need to install the agent on an on-premises server or a virtual machine (VM) so that it can be used with Systems Manager, see [How to install the SSM Agent on hybrid Linux nodes](./hybrid-multicloud-ssm-agent-install-linux.html). For information about installing the agent on edge devices, see [Managing edge devices with Systems Manager](./systems-manager-setting-up-edge-devices.html). -