AWS resolves command injection defect in Trusted Remote Execution SSM documents
What happened.Amazon Web Services published security bulletin 2026-173-AWS removing vulnerable sample Systems Manager documents for Trusted Remote Execution.
Why it matters.Systems Manager documents automate operations across fleet instances with elevated instance profile permissions. When sample documents unsafely concatenate parameter strings, authenticated operators execute arbitrary shell commands that bypass Cedar authorization policies. Security operations engineers should audit account inventories for custom Rex SSM documents. DevOps leads should replace concatenated parameter scripts with strictly typed SSM parameter schemas.