AWS Security ChangesHomeSearch

AWS systems-manager documentation change

Service: systems-manager · 2025-08-28 · Documentation low

File: systems-manager/latest/userguide/automation-document-builder.md

Summary

Updated default AMI ID from Amazon Linux 1 to Amazon Linux 2023 in automation document examples and descriptions.

Security assessment

The change updates the default AMI to a newer version, which may include security improvements, but there is no explicit mention of addressing a security vulnerability or weakness. This appears to be a routine update to align with current Amazon Linux versions.

Diff

diff --git a/systems-manager/latest/userguide/automation-document-builder.md b/systems-manager/latest/userguide/automation-document-builder.md
index 398baab3a..a668ca129 100644
--- a//systems-manager/latest/userguide/automation-document-builder.md
+++ b//systems-manager/latest/userguide/automation-document-builder.md
@@ -160 +160 @@ For information, see [IAM and Amazon EC2](https://docs.aws.amazon.com/AWSEC2/lat
-        imageId  | String | (Optional) The AMI ID to use for launching the instance. The default value uses the latest Amazon Linux AMI ID available. | {{ ssm:/aws/service/ami-amazon-linux-latest/amzn-ami-hvm-x86_64-gp2 }}
+        imageId  | String | (Optional) The AMI ID to use for launching the instance. The default value uses the latest Amazon Linux 2023 AMI ID available. | {{ ssm:/aws/service/ami-amazon-linux-latest/al2023-ami-kernel-6.1-arm64 }}
@@ -180 +180 @@ For runbooks not owned by Amazon that use the `aws:executeScript` action, a role
-                {{ ssm:/aws/service/ami-amazon-linux-latest/amzn-ami-hvm-x86_64-gp2 }}
+                {{ ssm:/aws/service/ami-amazon-linux-latest/al2023-ami-kernel-6.1-arm64 }}
@@ -184 +184 @@ For runbooks not owned by Amazon that use the `aws:executeScript` action, a role
-This value launches an Amazon EC2 instance using the latest Amazon Linux 1 Amazon Machine Image (AMI) ID. If you want to use a different AMI, replace the value with your AMI ID.
+This value launches an Amazon EC2 instance using the latest Amazon Linux 2023 Amazon Machine Image (AMI) ID. If you want to use a different AMI, replace the value with your AMI ID.
@@ -188 +188 @@ This value launches an Amazon EC2 instance using the latest Amazon Linux 1 Amazo
-                (Optional) The AMI ID to use for launching the instance. The default value uses the latest released Amazon Linux AMI ID.
+                (Optional) The AMI ID to use for launching the instance. The default value uses the latest released Amazon Linux 2023 AMI ID.