AWS systems-manager medium security documentation change
Summary
Updated managed policy AWSSystemsManagerJustInTimeAccessTokenPolicy with data channel permissions
Security assessment
Explicitly adds permissions related to session management security controls. Just-In-Time access is a security feature, and expanding its policy suggests security hardening
Diff
diff --git a/systems-manager/latest/userguide/systems-manager-release-history.md b/systems-manager/latest/userguide/systems-manager-release-history.md index 6626f86b6..b65fd882b 100644 --- a//systems-manager/latest/userguide/systems-manager-release-history.md +++ b//systems-manager/latest/userguide/systems-manager-release-history.md @@ -13 +12,0 @@ Change| Description| Date -AWS Systems Manager Change Manager will no longer be open to new customers starting November 7, 2025.| AWS Systems Manager Change Manager will no longer be open to new customers starting November 7, 2025. If you would like to use Change Manager, sign up prior to that date. Existing customers can continue to use the service as normal. For more information, see [AWS Systems Manager Change Manager availability change](https://docs.aws.amazon.com/systems-manager/latest/userguide/change-manager-availability-change.html). | October 7, 2025 @@ -14,0 +14 @@ New versions of the AWS Parameters and Secrets Lambda Extension| New versions of +Updated managed policy AWSSystemsManagerJustInTimeAccessTokenPolicy| Systems Manager has updated the managed policy `AWSSystemsManagerJustInTimeAccessTokenPolicy` to provide data channel permissions for session management. For information, see [Systems Manager updates to AWS managed policies](https://docs.aws.amazon.com/systems-manager/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates).| September 25, 2025 @@ -470 +470 @@ Automation Runbook Reference reorganization| To help you find the runbooks you n -Patch Manager: Generate .csv patch compliance reports| Patch Manager now supports the ability to generate patch compliance reports for your instances and save the report in an S3 bucket of your choice, in .csv format. Then, using a tool like [Amazon QuickSight](https://docs.aws.amazon.com/quicksight/latest/user/), you can analyze the patch compliance report data. You can generate a patch compliance report for a single instance, or for all instances in your AWS account. You can generate a one-time report on demand, or set up a schedule for reports to be created automatically. You can also specify an Amazon Simple Notification Service topic to provide notifications when a report is generated. For more information, see [Generating CSV patch compliance reports](https://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-store-compliance-results-in-s3.html).| April 9, 2021 +Patch Manager: Generate .csv patch compliance reports| Patch Manager now supports the ability to generate patch compliance reports for your instances and save the report in an S3 bucket of your choice, in .csv format. Then, using a tool like [Amazon QuickSight](https://docs.aws.amazon.com/quicksuite/latest/userguide/what-is.html), you can analyze the patch compliance report data. You can generate a patch compliance report for a single instance, or for all instances in your AWS account. You can generate a one-time report on demand, or set up a schedule for reports to be created automatically. You can also specify an Amazon Simple Notification Service topic to provide notifications when a report is generated. For more information, see [Generating CSV patch compliance reports](https://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-store-compliance-results-in-s3.html).| April 9, 2021