AWS cli documentation change
Summary
Added --association-dispatch-assume-role parameter and documentation for custom IAM role configuration
Security assessment
Introduces CLI parameter and warnings about service-linked role deprecation, enabling better permission control and security posture improvement. No evidence of fixing a specific vulnerability.
Diff
diff --git a/cli/latest/reference/ssm/update-association.md b/cli/latest/reference/ssm/update-association.md index d9bc6f515..f38f41df5 100644 --- a//cli/latest/reference/ssm/update-association.md +++ b//cli/latest/reference/ssm/update-association.md @@ -15 +15 @@ - * [AWS CLI 2.33.25 Command Reference](../../index.html) » + * [AWS CLI 2.33.27 Command Reference](../../index.html) » @@ -94,0 +95 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/ssm-20 + [--association-dispatch-assume-role <value>] @@ -915,0 +917,18 @@ JSON Syntax: +`--association-dispatch-assume-role` (string) + +> A role used by association to take actions on your behalf. State Manager will assume this role and call required APIs when dispatching configurations to nodes. If not specified, [service-linked role for Systems Manager](https://docs.aws.amazon.com/systems-manager/latest/userguide/using-service-linked-roles.html) will be used by default. +> +> ### Note +> +> It is recommended that you define a custom IAM role so that you have full control of the permissions that State Manager has when taking actions on your behalf. +> +> Service-linked role support in State Manager is being phased out. Associations relying on service-linked role may require updates in the future to continue functioning properly. +> +> Constraints: +> +> * min: `1` +> * max: `512` +> * pattern: `arn:aws(-[^:]+)?:iam::[0-9]{12}:role/.+` +> + + @@ -1865,0 +1885,12 @@ AssociationDescription -> (structure) +> +> AssociationDispatchAssumeRole -> (string) +> +>> A role used by association to take actions on your behalf. State Manager will assume this role and call required APIs when dispatching configurations to nodes. If not specified, [service-linked role for Systems Manager](https://docs.aws.amazon.com/systems-manager/latest/userguide/using-service-linked-roles.html) will be used by default. +>> +>> Constraints: +>> +>> * min: `1` +>> * max: `512` +>> * pattern: `arn:aws(-[^:]+)?:iam::[0-9]{12}:role/.+` +>> + @@ -1877 +1908 @@ AssociationDescription -> (structure) - * [AWS CLI 2.33.25 Command Reference](../../index.html) » + * [AWS CLI 2.33.27 Command Reference](../../index.html) »