AWS Security ChangesHomeSearch

AWS systems-manager: Clarify JIT node access disable procedure and warning

Service: systems-manager · 2026-09-27 · Documentation low

File: systems-manager/latest/userguide/systems-manager-just-in-time-node-access-disable.md · Type: authz

Summary

Rewrites the disable procedure to cover both organization and single-account setups, converts the warning into an Important note, and changes 'select' to 'choose' wording.

Security assessment

The edit is editorial: it clarifies who signs in (delegated admin vs single account) and elevates the existing caution about losing connectivity after disabling just-in-time node access. It documents an access-control feature's teardown but does not address a specific vulnerability or add new security guidance.

Evidence

+After you disable just-in-time node access, users might be unable to connect to your nodes unless you have other connection methods already set up.

Diff

diff --git a/systems-manager/latest/userguide/systems-manager-just-in-time-node-access-disable.md b/systems-manager/latest/userguide/systems-manager-just-in-time-node-access-disable.md
index 509d37063..d0fdb9c98 100644
--- a//systems-manager/latest/userguide/systems-manager-just-in-time-node-access-disable.md
+++ b//systems-manager/latest/userguide/systems-manager-just-in-time-node-access-disable.md
@@ -9 +9,3 @@
-The following procedure describes how to disable just-in-time node access. After disabling just-in-time node access, users in your organization might be unable to connect to your nodes unless you've already implemented other connection methods.
+###### Important
+
+After you disable just-in-time node access, users might be unable to connect to your nodes unless you have other connection methods already set up.
@@ -13 +15,5 @@ The following procedure describes how to disable just-in-time node access. After
-  1. Log in to the Systems Manager delegated administrator account for your organization.
+  1. Depending on your setup, do one of the following:
+
+     * For an organization setup, sign in to the Systems Manager delegated administrator account for your organization.
+
+     * For a single-account setup, sign in to the account where you set up just-in-time node access.
@@ -17 +23 @@ The following procedure describes how to disable just-in-time node access. After
-  3. Select **Settings** in the navigation pane.
+  3. Choose **Settings** in the navigation pane.
@@ -19 +25 @@ The following procedure describes how to disable just-in-time node access. After
-  4. In the **Just-in-time node access** tab, select **Disable**.
+  4. On the **Just-in-time node access** tab, choose **Disable**.