Skip to content

Commit 7aea50e

Browse files
added another reference
1 parent dda336d commit 7aea50e

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

rules/integrations/aws/execution_ssm_command_document_created_by_rare_user.toml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,8 @@ language = "kuery"
2222
license = "Elastic License v2"
2323
name = "AWS SSM Command Document Created by Rare User"
2424
references = [
25-
"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateDocument.html"
25+
"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateDocument.html",
26+
"https://docs.aws.amazon.com/systems-manager/latest/userguide/documents.html"
2627
]
2728
risk_score = 21
2829
rule_id = "50a2bdea-9876-11ef-89db-f661ea17fbcd"

0 commit comments

Comments
 (0)