AWS Security ChangesHomeSearch

AWS systems-manager documentation change

Service: systems-manager · 2025-12-10 · Documentation low

File: systems-manager/latest/userguide/walkthrough-powershell.md

Summary

Removed documentation for the AWS-UpdateEC2Config document, including command examples and parameter references.

Security assessment

The change removes outdated EC2Config update procedures but shows no evidence of addressing a specific security vulnerability. EC2Config is being phased out in favor of EC2Launch, which is a routine deprecation.

Diff

diff --git a/systems-manager/latest/userguide/walkthrough-powershell.md b/systems-manager/latest/userguide/walkthrough-powershell.md
index ba0f7e85a..812a84c2e 100644
--- a//systems-manager/latest/userguide/walkthrough-powershell.md
+++ b//systems-manager/latest/userguide/walkthrough-powershell.md
@@ -5 +5 @@
-Configure AWS Tools for Windows PowerShell session settingsList all available documentsRun PowerShell commands or scriptsInstall an application using the AWS-InstallApplication documentInstall a PowerShell module using the AWS-InstallPowerShellModule JSON documentJoin a managed node to a Domain using the AWS-JoinDirectoryServiceDomain JSON documentSend Windows metrics to Amazon CloudWatch Logs using the AWS-ConfigureCloudWatch documentUpdate EC2Config using the AWS-UpdateEC2Config documentTurn on or turn off Windows automatic update using the AWS-ConfigureWindowsUpdate documentManage Windows updates using Run Command
+Configure AWS Tools for Windows PowerShell session settingsList all available documentsRun PowerShell commands or scriptsInstall an application using the AWS-InstallApplication documentInstall a PowerShell module using the AWS-InstallPowerShellModule JSON documentJoin a managed node to a Domain using the AWS-JoinDirectoryServiceDomain JSON documentSend Windows metrics to Amazon CloudWatch Logs using the AWS-ConfigureCloudWatch documentTurn on or turn off Windows automatic update using the AWS-ConfigureWindowsUpdate documentManage Windows updates using Run Command
@@ -33,2 +32,0 @@ Only trusted administrators should be allowed to use Systems Manager pre-configu
-  * Update EC2Config using the AWS-UpdateEC2Config document
-
@@ -348,43 +345,0 @@ The following demonstration command uploads performance counters to CloudWatch.
-## Update EC2Config using the `AWS-UpdateEC2Config` document
-
-Using Run Command and the `AWS-EC2ConfigUpdate` document, you can update the EC2Config service running on your Windows Server managed nodes. This command can update the EC2Config service to the latest version or a version you specify.
-
-**View the description and available parameters**
-    
-    
-    Get-SSMDocumentDescription `
-        -Name "AWS-UpdateEC2Config"
-
-**View more information about parameters**
-    
-    
-    Get-SSMDocumentDescription `
-        -Name "AWS-UpdateEC2Config" | Select -ExpandProperty Parameters
-
-### Update EC2Config to the latest version
-    
-    
-    $ec2ConfigCommand = Send-SSMCommand `
-        -InstanceId instance-ID `
-        -DocumentName "AWS-UpdateEC2Config"
-
-###### Get command information with response data for the managed node
-
-This command returns the output of the specified command from the previous `Send-SSMCommand`.
-    
-    
-    Get-SSMCommandInvocation `
-        -CommandId $ec2ConfigCommand.CommandId `
-        -Details $true `
-        -InstanceId instance-ID | Select -ExpandProperty CommandPlugins
-
-### Update EC2Config to a specific version
-
-The following command downgrades EC2Config to an older version.
-    
-    
-    Send-SSMCommand `
-        -InstanceId instance-ID `
-        -DocumentName "AWS-UpdateEC2Config" `
-        -Parameter @{'version'='4.9.3519'; 'allowDowngrade'='true'}
-