AWS systems-manager-automation-runbooks documentation change

Service: systems-manager-automation-runbooks · 2025-08-28 · Documentation medium

File: systems-manager-automation-runbooks/latest/userguide/automation-aws-analyze-ebs-resource-usage.md

Summary

Removed example IAM policy JSON for AutomationAssumeRole permissions

Security assessment

Policy example removal doesn't indicate a security issue. Could be documentation cleanup without security implications.

Diff

diff --git a/systems-manager-automation-runbooks/latest/userguide/automation-aws-analyze-ebs-resource-usage.md b/systems-manager-automation-runbooks/latest/userguide/automation-aws-analyze-ebs-resource-usage.md
index 9d594a629..c25971f69 100644
--- a//systems-manager-automation-runbooks/latest/userguide/automation-aws-analyze-ebs-resource-usage.md
+++ b//systems-manager-automation-runbooks/latest/userguide/automation-aws-analyze-ebs-resource-usage.md
@@ -135,57 +134,0 @@ The `AutomationAssumeRole` parameter requires the following actions to use the r
-JSON
-    
-
-****
-    
-    
-    
-            {
-                "Version": "2012-10-17",
-                "Statement": [{
-                    "Sid": "ReadOnlyPermissions",
-                    "Effect": "Allow",
-                    "Action": [
-                        "ec2:DescribeImages",
-                        "ec2:DescribeInstances",
-                        "ec2:DescribeSnapshots",
-                        "ec2:DescribeVolumes",
-                        "ssm:DescribeAutomationExecutions"
-                    ],
-                    "Resource": "*"
-                }, {
-                    "Sid": "KMSGeneratePermissions",
-                    "Effect": "Allow",
-                    "Action": ["kms:GenerateDataKey", "kms:Decrypt"],
-                    "Resource": "arn:aws:us-east-1:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab"
-                }, {
-                    "Sid": "S3ReadOnlyPermissions",
-                    "Effect": "Allow",
-                    "Action": [
-                        "s3:GetBucketAcl",
-                        "s3:GetBucketPolicyStatus",
-                        "s3:GetBucketPublicAccessBlock",
-                        "s3:ListBucket"
-                    ],
-                    "Resource": [
-                        "arn:aws:::amzn-s3-demo-bucket1",
-                        "arn:aws:::amzn-s3-demo-bucket2/"
-                    ]
-                }, {
-                    "Sid": "S3CreatePermissions",
-                    "Effect": "Allow",
-                    "Action": [
-                        "s3:CreateBucket",
-                        "s3:PutObject",
-                        "s3:PutBucketLogging",
-                        "s3:PutBucketPolicy",
-                        "s3:PutBucketPublicAccessBlock",
-                        "s3:PutBucketTagging",
-                        "s3:PutBucketVersioning",
-                        "s3:PutEncryptionConfiguration"
-                    ],
-                    "Resource": "*"
-                }]
-            }
-        
-    
-