AWS systems-manager medium security documentation change
Summary
Added new 'SSM Agent installation best practices' section emphasizing correct installation methods
Security assessment
Introduces security-focused guidance about installation methods, specifically warning about vulnerabilities from incorrect procedures. Strengthens security posture through documentation.
Diff
diff --git a/systems-manager/latest/userguide/security-best-practices.md b/systems-manager/latest/userguide/security-best-practices.md index e36ea0716..e809c6549 100644 --- a//systems-manager/latest/userguide/security-best-practices.md +++ b//systems-manager/latest/userguide/security-best-practices.md @@ -5 +5 @@ -Systems Manager preventative security best practicesSystems Manager monitoring and auditing best practices +Systems Manager preventative security best practicesSSM Agent installation best practicesSystems Manager monitoring and auditing best practices @@ -14,0 +15,2 @@ AWS Systems Manager provides a number of security features to consider as you de + * SSM Agent installation best practices + @@ -104,0 +107,24 @@ AWS regularly releases updated versions of tools and plugins that you can use in +## SSM Agent installation best practices + +When installing SSM Agent, use the appropriate installation method for your machine type. In particular, use the `ssm-setup-cli` tool for all non-EC2 installations in a [hybrid and multicloud](./operating-systems-and-machine-types.html#supported-machine-types) environment. This tool provides additional security protections for non-EC2 machines. + +To install the agent on on-premises servers and virtual machines, use the `ssm-setup-cli` tool as described in the following topics: + + * [Install SSM Agent on hybrid Linux nodes](./hybrid-multicloud-ssm-agent-install-linux.html) + + * [Install SSM Agent on hybrid Windows Server nodes](./hybrid-multicloud-ssm-agent-install-windows.html) + + + + +To install the agent on EC2 instances, use the appropriate installation procedure for your operating system type: + + * [Manually installing and uninstalling SSM Agent on EC2 instances for Linux](./manually-install-ssm-agent-linux.html) + + * [Manually installing and uninstalling SSM Agent on EC2 instances for macOS](./manually-install-ssm-agent-macos.html) + + * [Manually installing and uninstalling SSM Agent on EC2 instances for Windows Server](./manually-install-ssm-agent-windows.html) + + + +