AWS systems-manager documentation change

Service: systems-manager · 2026-03-22 · Documentation medium

File: systems-manager/latest/userguide/quick-setup-getting-started.md

Summary

Updated IAM policy condition to include 'cloudformation.amazonaws.com' in the iam:PassedToService list.

Security assessment

This change expands the trusted services in an IAM policy condition, which is a security-related configuration. It does not fix a security issue but updates documentation to reflect a broader trust relationship, potentially impacting the security posture by allowing more services to pass roles.

Diff

diff --git a/systems-manager/latest/userguide/quick-setup-getting-started.md b/systems-manager/latest/userguide/quick-setup-getting-started.md
index e75817a65..7b7c37d5e 100644
--- a//systems-manager/latest/userguide/quick-setup-getting-started.md
+++ b//systems-manager/latest/userguide/quick-setup-getting-started.md
@@ -145 +145,4 @@ JSON
-                        "iam:PassedToService": "ssm-quicksetup.amazonaws.com"
+    	            "iam:PassedToService": [
+    	                "ssm-quicksetup.amazonaws.com",
+    	                "cloudformation.amazonaws.com"
+    	            ]