Critical SSM Regional

SSM documents should have the block public sharing setting enabled

FSBP

Description

Ensures the block public sharing setting is enabled for SSM documents.


Remediation

To enable the block public sharing setting for SSM documents, configure the service setting to disable public sharing permissions.

Steps

  1. Open the AWS Systems Manager console.
  2. Navigate to 'Settings' in the left navigation pane.
  3. Locate the 'Public sharing permission' setting.
  4. Set the value to 'Disable' to block public sharing.
  5. Save the configuration.
  6. Note: This setting applies per region, so configure it for each region where you use SSM documents.

Compliance

FSBP