AWS systems-manager documentation change
Summary
Added a release note entry for the AmazonSSMAutomationRole policy update.
Security assessment
This adds documentation about a security-related IAM policy update in the release history. It does not fix a security issue but informs users of permission changes.
Diff
diff --git a/systems-manager/latest/userguide/systems-manager-release-history.md b/systems-manager/latest/userguide/systems-manager-release-history.md index 9f9097b5b..2067f8d6e 100644 --- a//systems-manager/latest/userguide/systems-manager-release-history.md +++ b//systems-manager/latest/userguide/systems-manager-release-history.md @@ -12,0 +13 @@ Change| Description| Date +Updated managed policy AmazonSSMAutomationRole| Systems Manager has updated the managed policy `AmazonSSMAutomationRole` to add the `cloudformation:TagResource` and `cloudformation:UntagResource` permissions. These permissions allow Automation runbooks that create CloudFormation stacks to add and remove tags from resources. For information, see [Systems Manager updates to AWS managed policies](https://docs.aws.amazon.com/systems-manager/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates).| March 20, 2026