REX CVE-2026-122193 affects SSM documents created from a setup example. AWS recommends deleting affected copies in each account and Region.
An upstream guide change doesn't retire deployed resources or stop an old setup script recreating them. Track provenance and callers; document names alone aren't proof.
https://keyrua.dev/blog/rex-cve-2026-122193-copied-ssm-documents?utm_source=devnull&utm_medium=social&utm_campaign=launch
keyrua.devREX CVE-2026-122193: Find the SSM Documents Your Setup Guide CreatedAWS’s November 6 REX advisory concerns SSM documents created from a setup example. A practical agency guide to finding copies, retiring affected infrastructure and reviewing credential exposure.
commit bb87d10