Changes This release adds support for cross account access in CreateOpsItem, UpdateOpsItem and GetOpsItem. It introduces new APIs to setup resource policies for SSM resources: PutResourcePolicy, GetResourcePolicies and DeleteResourcePolicy.
Changes This release includes support for applying a CloudWatch alarm to multi account multi region Systems Manager Automation
Changes Support of AmazonLinux2022 by Patch Manager
Changes This release includes support for applying a CloudWatch alarm to Systems Manager capabilities like Automation, Run Command, State Manager, and Maintenance Windows.
Changes This release adds new SSM document types ConformancePackTemplate and CloudFormation
Changes This release adds support for Systems Manager State Manager Association tagging.
Changes This release adds the TargetMaps parameter in SSM State Manager API.
Changes Update the StartChangeRequestExecution, adding TargetMaps to the Runbook parameter
Changes Added offset support for specifying the number of days to wait after the date and time specified by a CRON expression when creating SSM association.
Changes This Patch Manager release supports creating, updating, and deleting Patch Baselines for Rocky Linux OS.
Changes Update AddTagsToResource, ListTagsForResource, and RemoveTagsFromResource APIs to reflect the support for tagging Automation resources. Includes other minor documentation updates.
Changes AWS Systems Manager adds category support for DescribeDocument API
Changes Added two new attributes to DescribeInstanceInformation called SourceId and SourceType along with new string filters SourceIds and SourceTypes to filter instance records.
Changes Adds new parameter to CreateActivation API . This parameter is for "internal use only".
Changes Adds support for Session Reason and Max Session Duration for Systems Manager Session Manager.
Changes This Patch Manager release supports creating Patch Baselines for RaspberryPi OS (formerly Raspbian)
Changes When "AutoApprovable" is true for a Change Template, then specifying --auto-approve (boolean) in Start-Change-Request-Execution will create a change request that bypasses approver review. (except for change calendar restrictions)
Changes Added cutoff behavior support for preventing new task invocations from starting when the maintenance window cutoff time is reached.
Changes Changes to OpsCenter APIs to support a new feature, operational insights.
Changes This release adds new APIs to associate, disassociate and list related items in SSM OpsCenter; and this release adds DisplayName as a version-level attribute for SSM Documents and introduces two new document types: ProblemAnalysis, ProblemAnalysisTemplate.
Changes SSM feature release - ChangeCalendar integration with StateManager.
Changes Supports removing a label or labels from a parameter, enables ScheduledEndTime and ChangeDetails for StartChangeRequestExecution API, supports critical/security/other noncompliant count for patch API.
Changes This release allows SSM Explorer customers to enable OpsData sources across their organization when creating a resource data sync.
Changes Systems Manager support for tagging OpsMetadata.
Changes Add Support for Patch Manger Baseline Override parameter.
Changes AWS Systems Manager adds pagination support for DescribeDocumentPermission API
Changes Adding support for Change Manager API content
Changes AWS Systems Manager Patch Manager MAC OS Support and OpsMetadata Store APIs to store operational metadata for an Application.
Changes Add SessionId as a filter for DescribeSessions API
Changes add a new filter to allow customer to filter automation executions by using resource-group which used for execute automation
Changes This Patch Manager release now supports Common Vulnerabilities and Exposure (CVE) Ids for missing packages via the DescribeInstancePatches API.
Changes This Patch Manager release now supports searching for available packages from Amazon Linux and Amazon Linux 2 via the DescribeAvailablePatches API.
Changes Added offset support for specifying the number of days to wait after the date and time specified by a CRON expression before running the maintenance window.
Changes SSM State Manager support for executing an association only at specified CRON schedule after creating/updating an association.
Changes This Patch Manager release supports creating patch baselines for Oracle Linux and Debian
Changes AWS Systems Manager Parameter Store launches new data type to support aliases in EC2 APIs
Changes Added TimeoutSeconds as part of ListCommands API response.
Changes SSM State Manager support for adding list association filter for Resource Group and manual mode of managing compliance for an association.
Changes Resource data sync for AWS Systems Manager Inventory now includes destination data sharing. This feature enables you to synchronize inventory data from multiple AWS accounts into a central Amazon S3 bucket. To use this feature, all AWS accounts must be listed in AWS Organizations.
Changes This feature ensures that an instance is patched up to the available patches on a particular date. It can be enabled by selecting the 'ApproveUntilDate' option as the auto-approval rule while creating the patch baseline. ApproveUntilDate - The cutoff date for auto approval of released patches. Any patches released on or before this date will be installed automatically.
Changes This release updates the attachments support to include AttachmentReference source for Automation documents.
Changes This release allows customers to add tags to Automation execution, enabling them to sort and filter executions in different ways, such as by resource, purpose, owner, or environment.
Changes Added support for Cloud Watch Output and Document Version to the Run Command tasks in Maintenance Windows.
Changes Adds the SSM GetCalendarState API and ChangeCalendar SSM Document type. These features enable the forthcoming Systems Manager Change Calendar feature, which will allow you to schedule events during which actions should (or should not) be performed.
Changes AWS Systems Manager Documents now supports more Document Types: ApplicationConfiguration, ApplicationConfigurationSchema and DeploymentStrategy. This release also extends Document Permissions capabilities and introduces a new Force flag for DeleteDocument API.
Changes Add RebootOption and LastNoRebootInstallOperationTime for DescribeInstancePatchStates and DescribeInstancePatchStatesForPatchGroup API
Changes The release contains new API and API changes for AWS Systems Manager Explorer product.
Changes The release contains new API and API changes for AWS Systems Manager Explorer product.
Changes Updates support for adding attachments to Systems Manager Automation documents
Changes This release updates the AWS Systems Manager Parameter Store PutParameter and LabelParameterVersion APIs to return the "Tier" of parameter created/updated and the "parameter version" labeled respectively.
Changes This feature adds "default tier" to the AWS Systems Manager Parameter Store for parameter creation and update. AWS customers can now set the "default tier" to one of the following values: Standard (default), Advanced or Intelligent-Tiering. This allows customers to create advanced parameters or parameters in corresponding tiers with one setting rather than code change to specify parameter tiers.
Changes You can now use Maintenance Windows to select a resource group as the target. By selecting a resource group as the target of a Maintenance Window, customers can perform routine tasks across different resources such as Amazon Elastic Compute Cloud (AmazonEC2) instances, Amazon Elastic Block Store (Amazon EBS) volumes, and Amazon Simple Storage Service(Amazon S3) buckets within the same recurring time window.
Changes AWS Systems Manager now supports deleting a specific version of a SSM Document.
Changes OpsCenter is a new Systems Manager capability that allows you to view, diagnose, and remediate, operational issues, aka OpsItems, related to various AWS resources by bringing together contextually relevant investigation information. New APIs to create, update, describe, and get OpsItems as well as OpsItems summary API.
Changes Patch Manager adds support for Microsoft Application Patching.
Changes This release updates AWS Systems Manager APIs to allow customers to configure parameters to use either the standard-parameter tier (the default tier) or the advanced-parameter tier. It allows customers to create parameters with larger values and attach parameter policies to an Advanced Parameter.
Changes This release updates AWS Systems Manager APIs to support service settings for AWS customers. A service setting is a key-value pair that defines how a user interacts with or uses an AWS service, and is typically created and consumed by the AWS service team. AWS customers can read a service setting via GetServiceSetting API and update the setting via UpdateServiceSetting API or ResetServiceSetting API, which are introduced in this release. For example, if an AWS service charges money to the account based on a feature or service usage, then the AWS service team might create a setting with the default value of "false". This means the user can't use this feature unless they update the setting to "true" and intentionally opt in for a paid feature.
Changes AWS Systems Manager now supports adding tags when creating Activations, Patch Baselines, Documents, Parameters, and Maintenance Windows
Changes AWS Systems Manager State Manager now supports configuration management of all AWS resources through integration with Automation.
Changes AWS Systems Manager Distributor helps you securely distribute and install software packages.
Changes AWS Systems Manager Automation now allows you to execute and manage Automation workflows across multiple accounts and regions.
Changes Compliance Severity feature release for State Manager. Users now have the ability to select compliance severity to their association in state manager console or CLI.
Changes Rate Control feature release for State Manager. Users now have the ability to apply rate control parameters similar to run command to their association in state manager console or CLI.
Changes Adds StartDate, EndDate, and ScheduleTimezone to CreateMaintenanceWindow and UpdateMaintenanceWindow; Adds NextExecutionTime to GetMaintenanceWindow and DescribeMaintenanceWindows; Adds CancelMaintenanceWindowExecution, DescribeMaintenanceWindowSchedule and DescribeMaintenanceWindowsForTarget APIs.
Changes Adds RejectedPatchesAction to baseline to enable stricted validation of the rejected Patches List ; Add InstalledRejected and InstallOverrideList to compliance reporting
Changes Session Manager is a fully managed AWS Systems Manager capability that provides interactive one-click access to Amazon EC2 Linux and Windows instances.
Changes AWS Systems Manager Inventory now supports groups to quickly see a count of which managed instances are and arent configured to collect one or more Inventory types
Changes AWS Systems Manager Automation is launching two new features for Automation Execution Rate Control based on tags and customized parameter maps. With the first feature, customer can target their resources by specifying a Tag with Key/Value. With the second feature, Parameter maps rate control, customers can benefit from customization of input parameters.
Changes Two new filters ExecutionStage and DocumentName will be added to ListCommands so that customers will have more approaches to query their commands.
Changes This release updates AWS Systems Manager APIs to allow customers to attach labels to history parameter records and reference history parameter records via labels. It also adds Parameter Store integration with AWS Secrets Manager to allow referencing and retrieving AWS Secrets Manager's secrets from Parameter Store.
Changes Support Conditional Branching OnFailure for SSM Automation
Changes Execution History and StartAssociationOnce release for State Manager. Users now have the ability to view association execution history with DescribeAssociationExecutions and DescribeAssociationExecutionTargets. Users can also execute an association by calling StartAssociationOnce.
Changes Adds Amazon Linux 2 support to Patch Manager
Changes Added support for new parameter, CloudWatchOutputConfig, for SendCommand API. Users can now have RunCommand output sent to CloudWatchLogs.
Changes Added support for new parameter, DocumentVersion, for SendCommand API. Users can now specify version of SSM document to be executed on the target(s).
Changes Added new APIs DeleteInventory and DescribeInventoryDeletions, for customers to delete their custom inventory data.
Changes This Patch Manager release supports creating patch baselines for CentOS.
Changes This Inventory release supports the status message details reported by the last sync for the resource data sync API.
Changes This Patch Manager release supports configuring Linux repos as part of patch baselines, controlling updates of non-OS security packages and also creating patch baselines for SUSE12
Changes This release updates AWS Systems Manager APIs to enable executing automations at controlled rate, target resources in a resource groups and execute entire automation at once or single step at a time. It is now also possible to use YAML, in addition to JSON, when creating Systems Manager documents.
Changes EC2 Systems Manager GetInventory API adds support for aggregation.
Changes EC2 Systems Manager versioning support for Parameter Store. Also support for referencing parameter versions in SSM Documents.
Changes EC2 Systems Manager support for tagging SSM Documents. Also support for tag-based permissions to restrict access to SSM Documents based on these tags.
Changes Adding KMS encryption support to SSM Inventory Resource Data Sync. Exposes the ClientToken parameter on SSM StartAutomationExecution to provide idempotent execution requests.
Changes Changes to associations in Systems Manager State Manager can now be recorded. Previously, when you edited associations, you could not go back and review older association settings. Now, associations are versioned, and can be named using human-readable strings, allowing you to see a trail of association changes. You can also perform rate-based scheduling, which allows you to schedule associations more granularly.
Changes Systems Manager Maintenance Windows include the following changes or enhancements: New task options using Systems Manager Automation, AWS Lambda, and AWS Step Functions; enhanced ability to edit the targets of a Maintenance Window, including specifying a target name and description, and ability to edit the owner field; enhanced ability to edits tasks; enhanced support for Run Command parameters; and you can now use a --safe flag when attempting to deregister a target. If this flag is enabled when you attempt to deregister a target, the system returns an error if the target is referenced by any task. Also, Systems Manager now includes Configuration Compliance to scan your fleet of managed instances for patch compliance and configuration inconsistencies. You can collect and aggregate data from multiple AWS accounts and Regions, and then drill down into specific resources that aren't compliant.
Changes Adds a SendAutomationSignal API to SSM Service. This API is used to send a signal to an automation execution to change the current behavior or status of the execution.
Changes Amazon EC2 Systems Manager now expands Patching support to Amazon Linux, Red Hat and Ubuntu in addition to the already supported Windows Server.
Changes Adding Resource Data Sync support to SSM Inventory. New APIs: * CreateResourceDataSync - creates a new resource data sync configuration, * ListResourceDataSync - lists existing resource data sync configurations, * DeleteResourceDataSync - deletes an existing resource data sync configuration.
Changes Adding hierarchy support to the SSM Parameter Store API. Added support tor tagging. New APIs: GetParameter - retrieves one parameter, DeleteParameters - deletes multiple parameters (max number 10), GetParametersByPath - retrieves parameters located in the hierarchy. Updated APIs: PutParameter - added ability to enforce parameter value by applying regex (AllowedPattern), DescribeParameters - modified to support Tag filtering.
Changes UpdateAssociation API now supports updating document name and targets of an association. GetAutomationExecution API can return FailureDetails as an optional field to the StepExecution Object, which contains failure type, failure stage as well as other failure related information for a failed step.
Changes Add support for Patch Baseline and Patch Compliance APIs
Changes Amazon EC2 Systems Manager is a flexible and easy to use management service that enables enterprises to securely manage and administer their workloads running on-premises or in the AWS cloud, using a single unified experience. These tasks include collecting system inventory, AWSmaintaining consistent state, ad hoc remote execution, automating imaging creation, applying OS patches, and managing configuration parameters.
Changes Adds notification support.