AWS systems-manager documentation change
Summary
Updated references from 'AWS Directory Service' to 'Directory Service' for consistency, and fixed a PowerShell documentation URL format
Security assessment
Changes involve terminology updates (branding consistency) and URL formatting fixes. No security vulnerabilities or new security features are mentioned. The AmazonSSMDirectoryServiceAccess policy reference remains unchanged in its security context.
Diff
diff --git a/systems-manager/latest/userguide/hybrid-multicloud-service-role.md b/systems-manager/latest/userguide/hybrid-multicloud-service-role.md index 0d0bb8a52..e729c28a7 100644 --- a//systems-manager/latest/userguide/hybrid-multicloud-service-role.md +++ b//systems-manager/latest/userguide/hybrid-multicloud-service-role.md @@ -51 +51 @@ The console retains your selection even if you search for other policies. - * If you plan to join non-EC2 machines to an Active Directory managed by AWS Directory Service, search for **AmazonSSMDirectoryServiceAccess** and select the check box next to its name. + * If you plan to join non-EC2 machines to an Active Directory managed by Directory Service, search for **AmazonSSMDirectoryServiceAccess** and select the check box next to its name. @@ -189 +189 @@ Windows -(Optional) Run the following command to allow SSM Agent to access AWS Directory Service on your behalf for requests to join the domain by the managed node. Your service role needs this policy only if you join your nodes to a Microsoft AD directory. +(Optional) Run the following command to allow SSM Agent to access Directory Service on your behalf for requests to join the domain by the managed node. Your service role needs this policy only if you join your nodes to a Microsoft AD directory. @@ -258 +258 @@ JSON - 3. Open PowerShell in administrative mode, and in the directory where you created the JSON file, run [New-IAMRole](https://docs.aws.amazon.com/powershell/latest/reference/items/Register-IAMRolePolicy.html) as follows to create a service role. This example creates a role named `SSMServiceRole`. You can choose another name if you prefer. + 3. Open PowerShell in administrative mode, and in the directory where you created the JSON file, run [New-IAMRole](https://docs.aws.amazon.com//powershell/latest/reference/items/Register-IAMRolePolicy.html) as follows to create a service role. This example creates a role named `SSMServiceRole`. You can choose another name if you prefer. @@ -282 +282 @@ If you created a custom S3 bucket policy for your service role, run the followin -(Optional) Run the following command to allow SSM Agent to access AWS Directory Service on your behalf for requests to join the domain by the managed node. Your server role needs this policy only if you join your nodes to a Microsoft AD directory. +(Optional) Run the following command to allow SSM Agent to access Directory Service on your behalf for requests to join the domain by the managed node. Your server role needs this policy only if you join your nodes to a Microsoft AD directory.