AWS Systems Manager now supports sharing documents through AWS Resource Access Manager

AWS Systems Manager now allows sharing SSM documents across an organization or specific organizational units (OUs) using AWS Resource Access Manager (AWS RAM). Previously, documents could only be shared publicly or with individual account IDs, but now they can be easily shared with entire organizations or OUs, and Systems Manager automatically keeps the sharing up to date-so manual account tracking is no longer needed when accounts are added to or removed from the organization or OU. To share documents, create an AWS RAM resource share, add the SSM documents you want to share, and select the organizations or OUs to share with. Access is granted through standard AWS authentication, as sharing is managed by AWS RAM and resource-based policies. If sharing documents with accounts outside the organization, those accounts must accept the resource share invitation before access is granted, giving both document owners and consumers more control over shared access. This feature is available via the Systems Manager console, AWS CLI, and AWS SDK in all AWS Regions where Systems Manager is offered, at no additional cost. To get started, open the document page in the Systems Manager console or see the AWS Systems Manager User Guide.

Why it matters

This update enables AWS Systems Manager document sharing at the organization or OU level, aiding in automation and enhanced security for management.