SSM document is shared publicly with every AWS account

What it checks

SSM document is shared publicly with every AWS account

Where it applies

Terraform: aws_ssm_document

CloudFormation: no CloudFormation type maps to these resources yet.

How to fix it

1. Set permissions.account_ids to the specific account IDs that need the document, or remove the permissions block to keep it private. Never share with "all".

Frameworks

• SOC 2 CC6.1
• SOC 2 CC6.6

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules