All checks
Critical
SSM documents should have the block public sharing setting enabled
Ensures the block public sharing setting for SSM documents, which is set per Region, is on in this Region. A public document can expose information about your account, resources and internal processes. Evaluated only in Regions where this account owns SSM documents.
- service
- SSM
- severity
- Critical
- scope
- evaluated in every region
How to fix it
In the console
Systems Manager → Documents → Preferences
With the AWS CLI
aws ssm update-service-setting --setting-id /ssm/documents/console/public-sharing-permission --setting-value Disable --region <region>With Terraform
resource "aws_ssm_service_setting" "this" {
setting_id = "/ssm/documents/console/public-sharing-permission"
setting_value = "Disable"
}See which of your accounts this check is failing on.
Book a demo