AWS systems-manager documentation change
Summary
Updated explanation about SSH session logging limitations with TLS context
Security assessment
Reiterates TLS encryption details for consistency across documentation. No evidence of security issue remediation, but improves transparency about security architecture.
Diff
diff --git a/systems-manager/latest/userguide/session-manager.md b/systems-manager/latest/userguide/session-manager.md index 4ec07b659..4091d56a2 100644 --- a//systems-manager/latest/userguide/session-manager.md +++ b//systems-manager/latest/userguide/session-manager.md @@ -57 +57 @@ Logging capabilities are provided through integration with the following AWS ser -Logging isn't available for Session Manager sessions that connect through port forwarding or SSH. This is because SSH encrypts all session data, and Session Manager only serves as a tunnel for SSH connections. +Logging isn't available for Session Manager sessions that connect through port forwarding or SSH. This is because SSH encrypts all session data within the secure TLS connection established between the AWS CLI and Session Manager endpoints, and Session Manager only serves as a tunnel for SSH connections.