AWS Systems Manager documents can now be shared through AWS Resource Access Manager

Hi everyone, it's Shii-chan! Here's a sharing update for anyone managing operations automation.

AWS What's New aws.amazon.com

What was announced?

According to AWS What's New, you can now share AWS Systems Manager documents (SSM Documents) with an entire AWS organization or with specific organizational units (OUs) using AWS Resource Access Manager (AWS RAM).

The story so far

Previously, you had only two options:

• Share a document publicly
• Share it with a list of individual account IDs

That meant updating the list by hand whenever accounts were added or removed.

What changes

When you share with an organization or OU, Systems Manager automatically keeps that sharing up to date as accounts are added to or removed from it. No more tracking accounts manually!

Dive Deep

Here is how to share a document:

• Create an AWS RAM resource share
• Add the SSM Documents you want to share
• Select the organizations or OUs to share with

Because sharing is managed through AWS RAM and resource-based policies, access is granted through standard AWS authorization. When you share a document with an account outside your organization, that account receives a resource share invitation and gains access only after it accepts, giving both the owner and the consumer more control.

It's available in the Systems Manager console, the AWS CLI, and the AWS SDKs, in all AWS Regions where Systems Manager is available. There is no additional charge to share documents through AWS RAM. To get started, open the Documents page in the Systems Manager console.

Wrap-up

• SSM Documents can be shared with organizations and OUs through AWS RAM
• Sharing follows account additions and removals automatically
• Accounts outside your organization must accept an invitation first
• Available in the console, CLI, and SDKs at no extra charge

This is for platform teams distributing runbooks and automation documents across many accounts!