AWS systems-manager medium security documentation change
Summary
Added entry about updated managed policy AWSSystemsManagerJustInTimeAccessServicePolicy with tagging permissions for scoping operator permissions. Removed references to Raspberry Pi OS in patch baseline rules documentation. Removed CentOS 8.x documentation links and SLES patching documentation.
Security assessment
The managed policy update explicitly adds permissions for automation execution tagging to enable scoping operator permissions - a security-related least privilege improvement. No evidence of addressing a specific vulnerability.
Diff
diff --git a/systems-manager/latest/userguide/systems-manager-release-history.md b/systems-manager/latest/userguide/systems-manager-release-history.md index 1208548b3..b8e2ad346 100644 --- a//systems-manager/latest/userguide/systems-manager-release-history.md +++ b//systems-manager/latest/userguide/systems-manager-release-history.md @@ -12,0 +13 @@ Change| Description| Date +Updated managed policy: AWSSystemsManagerJustInTimeAccessServicePolicy| Systems Manager has updated the managed policy `AWSSystemsManagerJustInTimeAccessServicePolicy` to add automation execution tagging permissions, making it possible for customers to scope down operator permissions to specific tags. For information, see [Systems Manager updates to AWS managed policies](https://docs.aws.amazon.com/systems-manager/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates).| August 25, 2025 @@ -423 +424 @@ Patch Manager now supports the Raspberry Pi OS operating system| You can now use - * [How patch baseline rules work on Debian Server and Raspberry Pi OS](./patch-manager-linux-rules.html#linux-rules-debian) + * [How patch baseline rules work on Debian Server](./patch-manager-linux-rules.html#linux-rules-debian) @@ -604,2 +604,0 @@ Patch Manager now supports CentOS 8.0 and 8.1| You can now use Patch Manager to - * [How patch baseline rules work on CentOS](https://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-linux-rules.html#linux-rules-centos) - * [Manually install SSM Agent on CentOS instances](https://docs.aws.amazon.com/systems-manager/latest/userguide/agent-install-centos.html) @@ -871,6 +869,0 @@ New and updated topics | You can now use Patch Manager to install patches that -In addition, you can now use Patch Manager to patch SUSE Linux Enterprise Server instances. Patch Manager supports patching SLES 12.* versions (64-bit only). For more information, see the SLES-specific information in the following topics: - - * [How security patches are selected](./patch-manager-selecting-patches.html) - * [How patches are installed](./patch-manager-installing-patches.html) - * [How patch baseline rules work on SUSE Linux Enterprise Server](./patch-manager-linux-rules.html#linux-rules-sles) -