AWS systems-manager documentation change
Summary
Added four new entries: Lambda Extension ARN updates, QuickSetup policy updates, and two new managed policies for patch/tag management
Security assessment
Documents new IAM managed policies (AWSQuickSetupPatchPolicy*ExecutionPolicy) which are security features controlling resource permissions. No evidence these address existing vulnerabilities.
Diff
diff --git a/systems-manager/latest/userguide/systems-manager-release-history.md b/systems-manager/latest/userguide/systems-manager-release-history.md index 927374610..4f864abfd 100644 --- a//systems-manager/latest/userguide/systems-manager-release-history.md +++ b//systems-manager/latest/userguide/systems-manager-release-history.md @@ -14,0 +15,4 @@ Change| Description| Date +Updated AWS Parameters and Secrets Lambda Extension ARNs| Updated the ARNs for the AWS Parameters and Secrets Lambda Extension to the latest available versions for all supported AWS Regions. For more information, see [Using Parameter Store parameters in Lambda functions](https://docs.aws.amazon.com/systems-manager/latest/userguide/ps-integration-lambda-extensions.html).| June 19, 2026 +Updated managed policy AWSQuickSetupManagedInstanceProfileExecutionPolicy| Systems Manager has updated the managed policy `AWSQuickSetupManagedInstanceProfileExecutionPolicy` to support Quick Setup PatchPolicy migration from CloudFormation inline policies to managed policies. The update adds automation execution capabilities including instance discovery, role updates, role tagging, and expanded PassRole permissions to Systems Manager. For information, see [Systems Manager updates to AWS managed policies](https://docs.aws.amazon.com/systems-manager/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates).| June 3, 2026 +New managed policy AWSQuickSetupPatchPolicyTagManagementExecutionPolicy| Systems Manager has released a new managed policy `AWSQuickSetupPatchPolicyTagManagementExecutionPolicy` to enable Quick Setup patch policy configurations to track which instances are managed through automated tagging and inventory collection. For information, see [Systems Manager updates to AWS managed policies](https://docs.aws.amazon.com/systems-manager/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates).| June 3, 2026 +New managed policy AWSQuickSetupPatchPolicyLambdaExecutionPolicy| Systems Manager has released a new managed policy `AWSQuickSetupPatchPolicyLambdaExecutionPolicy` that grants permissions to manage State Manager associations for automated cleanup operations when Quick Setup configurations are deleted. For information, see [Systems Manager updates to AWS managed policies](https://docs.aws.amazon.com/systems-manager/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates).| June 3, 2026