{
    "api_version": "1",
    "kind": "dse_post",
    "self": "https://update.dsesecurity.com/api/v1/posts/aws-ssm-session-manager-maximum-duration/",
    "item": {
        "id": "https://update.dsesecurity.com/updates/aws-ssm-session-manager-maximum-duration/",
        "slug": "aws-ssm-session-manager-maximum-duration",
        "url": "https://update.dsesecurity.com/updates/aws-ssm-session-manager-maximum-duration/",
        "alternate_urls": {
            "markdown": "https://update.dsesecurity.com/updates/aws-ssm-session-manager-maximum-duration.md",
            "json": "https://update.dsesecurity.com/api/v1/posts/aws-ssm-session-manager-maximum-duration/"
        },
        "title": "Set a total Session Manager duration for long-running staff sessions",
        "summary": "A total session limit gives an administrator a separate decision from how long an idle connection may remain open.",
        "format": {
            "slug": "guide",
            "name": "Guide"
        },
        "priority": {
            "slug": "info",
            "name": "Information"
        },
        "featured": false,
        "image": {
            "theme": "continuity-recovery",
            "label": "Continuity & recovery",
            "alt": "Paired infrastructure paths converging on a stable recovered service.",
            "card_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-card.webp?v=1.8.20",
            "hero_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-hero.webp?v=1.8.20",
            "social_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20",
            "width": 2400,
            "height": 1350
        },
        "topics": [
            {
                "slug": "business-continuity",
                "name": "Business Continuity",
                "url": "https://update.dsesecurity.com/topic/business-continuity/"
            },
            {
                "slug": "cybersecurity",
                "name": "Cybersecurity",
                "url": "https://update.dsesecurity.com/topic/cybersecurity/"
            },
            {
                "slug": "it",
                "name": "IT",
                "url": "https://update.dsesecurity.com/topic/it/"
            }
        ],
        "author": {
            "name": "DSE Security Editorial Team",
            "url": "https://update.dsesecurity.com/#editorial-team",
            "type": "Organization"
        },
        "publisher": {
            "name": "Detection Systems & Engineering",
            "url": "https://dsesecurity.com/"
        },
        "published_at": "2026-10-20T18:14:07+00:00",
        "modified_at": "2026-10-20T18:34:30+00:00",
        "reviewed_on": "2026-10-20",
        "reading_minutes": 2,
        "word_count": 280,
        "potentially_affected": "This applies to the Session Manager maximum-duration preference. The source does not guarantee that ending a session reverses commands already executed or supplies an application recovery procedure.",
        "dse_recommendation": "DSE recommends choosing the duration from actual support and maintenance tasks, with input from the service owner.",
        "primary_source": {
            "name": "AWS — Specify maximum session duration",
            "url": "https://docs.aws.amazon.com/systems-manager/latest/userguide/session-preferences-max-timeout.html",
            "published_on": null,
            "authority": "docs.aws.amazon.com"
        },
        "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
        "usage_info": "https://update.dsesecurity.com/usage/",
        "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
        "content_html": "<p>A total session limit gives an administrator a separate decision from how long an idle connection may remain open.</p>\n<h2>Source facts</h2>\n<p>Session Manager allows a maximum duration after which a session ends. AWS documents no maximum session duration by default. When enabled in Session Manager preferences, the configured value must be between one and 1,440 minutes. The setting controls the total session duration described by this page; AWS provides idle timeout as a separate preference topic.</p>\n<p>Source: <a href=\"https://docs.aws.amazon.com/systems-manager/latest/userguide/session-preferences-max-timeout.html\">AWS — Specify maximum session duration</a>.</p>\n<h2>Applicability</h2>\n<p>This applies to the Session Manager maximum-duration preference. The source does not guarantee that ending a session reverses commands already executed or supplies an application recovery procedure.</p>\n<h2>DSE recommendation</h2>\n<p>DSE recommends choosing the duration from actual support and maintenance tasks, with input from the service owner. Record how an operator should reconnect safely and how lengthy approved work will be handed off. Avoid setting an arbitrarily short limit that encourages bypassing the approved access method. Include maximum duration in the remote-access checklist so a later preferences change receives the same review as other staff access controls. Ask the support owner to identify tasks that need a planned reconnection or handoff, and include those instructions beside the approved duration. Keep any temporary exception time-bounded in the access record and restore the intended preference after the authorized work.</p>\n<h2>Verification</h2>\n<p>Proposed verification: in an authorized test environment, set a short temporary limit and observe when a harmless session ends. Record its start and end times and confirm the documented reconnection procedure works. Restore the approved production value after testing, then inspect the saved preference rather than relying only on the edit screen.</p>\n<h2>Official reference</h2>\n<p><a href=\"https://docs.aws.amazon.com/systems-manager/latest/userguide/session-preferences-max-timeout.html\">AWS — Specify maximum session duration</a>. Reviewed October 20, 2026.</p>",
        "content_text": "A total session limit gives an administrator a separate decision from how long an idle connection may remain open.\nSource facts\nSession Manager allows a maximum duration after which a session ends. AWS documents no maximum session duration by default. When enabled in Session Manager preferences, the configured value must be between one and 1,440 minutes. The setting controls the total session duration described by this page; AWS provides idle timeout as a separate preference topic.\nSource: AWS — Specify maximum session duration.\nApplicability\nThis applies to the Session Manager maximum-duration preference. The source does not guarantee that ending a session reverses commands already executed or supplies an application recovery procedure.\nDSE recommendation\nDSE recommends choosing the duration from actual support and maintenance tasks, with input from the service owner. Record how an operator should reconnect safely and how lengthy approved work will be handed off. Avoid setting an arbitrarily short limit that encourages bypassing the approved access method. Include maximum duration in the remote-access checklist so a later preferences change receives the same review as other staff access controls. Ask the support owner to identify tasks that need a planned reconnection or handoff, and include those instructions beside the approved duration. Keep any temporary exception time-bounded in the access record and restore the intended preference after the authorized work.\nVerification\nProposed verification: in an authorized test environment, set a short temporary limit and observe when a harmless session ends. Record its start and end times and confirm the documented reconnection procedure works. Restore the approved production value after testing, then inspect the saved preference rather than relying only on the edit screen.\nOfficial reference\nAWS — Specify maximum session duration. Reviewed October 20, 2026.",
        "content_markdown": "A total session limit gives an administrator a separate decision from how long an idle connection may remain open.\n\n## Source facts\n\nSession Manager allows a maximum duration after which a session ends. AWS documents no maximum session duration by default. When enabled in Session Manager preferences, the configured value must be between one and 1,440 minutes. The setting controls the total session duration described by this page; AWS provides idle timeout as a separate preference topic.\n\nSource: [AWS — Specify maximum session duration](https://docs.aws.amazon.com/systems-manager/latest/userguide/session-preferences-max-timeout.html).\n\n## Applicability\n\nThis applies to the Session Manager maximum-duration preference. The source does not guarantee that ending a session reverses commands already executed or supplies an application recovery procedure.\n\n## DSE recommendation\n\nDSE recommends choosing the duration from actual support and maintenance tasks, with input from the service owner. Record how an operator should reconnect safely and how lengthy approved work will be handed off. Avoid setting an arbitrarily short limit that encourages bypassing the approved access method. Include maximum duration in the remote-access checklist so a later preferences change receives the same review as other staff access controls. Ask the support owner to identify tasks that need a planned reconnection or handoff, and include those instructions beside the approved duration. Keep any temporary exception time-bounded in the access record and restore the intended preference after the authorized work.\n\n## Verification\n\nProposed verification: in an authorized test environment, set a short temporary limit and observe when a harmless session ends. Record its start and end times and confirm the documented reconnection procedure works. Restore the approved production value after testing, then inspect the saved preference rather than relying only on the edit screen.\n\n## Official reference\n\n[AWS — Specify maximum session duration](https://docs.aws.amazon.com/systems-manager/latest/userguide/session-preferences-max-timeout.html). Reviewed October 20, 2026."
    },
    "json_ld": {
        "@context": "https://schema.org",
        "@graph": [
            {
                "@type": "Organization",
                "@id": "https://dsesecurity.com/#organization",
                "name": "Detection Systems & Engineering",
                "alternateName": "DSE Security",
                "url": "https://dsesecurity.com/",
                "logo": {
                    "@type": "ImageObject",
                    "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20"
                }
            },
            {
                "@type": "Organization",
                "@id": "https://update.dsesecurity.com/#editorial-team",
                "name": "DSE Security Editorial Team",
                "url": "https://update.dsesecurity.com/",
                "parentOrganization": {
                    "@id": "https://dsesecurity.com/#organization"
                }
            },
            {
                "@type": "WebSite",
                "@id": "https://update.dsesecurity.com/#website",
                "name": "DSE Updates",
                "alternateName": "DSE Security Knowledge Hub",
                "url": "https://update.dsesecurity.com/",
                "inLanguage": "en-US",
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "potentialAction": {
                    "@type": "SearchAction",
                    "target": {
                        "@type": "EntryPoint",
                        "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}"
                    },
                    "query-input": "required name=search_term_string"
                }
            },
            {
                "@type": "WebPage",
                "@id": "https://update.dsesecurity.com/updates/aws-ssm-session-manager-maximum-duration/",
                "url": "https://update.dsesecurity.com/updates/aws-ssm-session-manager-maximum-duration/",
                "isPartOf": {
                    "@id": "https://update.dsesecurity.com/#website"
                },
                "lastReviewed": "2026-10-20"
            },
            {
                "@type": "BreadcrumbList",
                "@id": "https://update.dsesecurity.com/updates/aws-ssm-session-manager-maximum-duration/#breadcrumbs",
                "itemListElement": [
                    {
                        "@type": "ListItem",
                        "position": 1,
                        "name": "DSE Updates",
                        "item": "https://update.dsesecurity.com/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 2,
                        "name": "Business Continuity",
                        "item": "https://update.dsesecurity.com/topic/business-continuity/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 3,
                        "name": "Set a total Session Manager duration for long-running staff sessions",
                        "item": "https://update.dsesecurity.com/updates/aws-ssm-session-manager-maximum-duration/"
                    }
                ]
            },
            {
                "@type": [
                    "Article",
                    "TechArticle"
                ],
                "@id": "https://update.dsesecurity.com/updates/aws-ssm-session-manager-maximum-duration/#article",
                "identifier": "https://update.dsesecurity.com/updates/aws-ssm-session-manager-maximum-duration/",
                "url": "https://update.dsesecurity.com/updates/aws-ssm-session-manager-maximum-duration/",
                "headline": "Set a total Session Manager duration for long-running staff sessions",
                "description": "A total session limit gives an administrator a separate decision from how long an idle connection may remain open.",
                "abstract": "A total session limit gives an administrator a separate decision from how long an idle connection may remain open.",
                "articleBody": "A total session limit gives an administrator a separate decision from how long an idle connection may remain open.\nSource facts\nSession Manager allows a maximum duration after which a session ends. AWS documents no maximum session duration by default. When enabled in Session Manager preferences, the configured value must be between one and 1,440 minutes. The setting controls the total session duration described by this page; AWS provides idle timeout as a separate preference topic.\nSource: AWS — Specify maximum session duration.\nApplicability\nThis applies to the Session Manager maximum-duration preference. The source does not guarantee that ending a session reverses commands already executed or supplies an application recovery procedure.\nDSE recommendation\nDSE recommends choosing the duration from actual support and maintenance tasks, with input from the service owner. Record how an operator should reconnect safely and how lengthy approved work will be handed off. Avoid setting an arbitrarily short limit that encourages bypassing the approved access method. Include maximum duration in the remote-access checklist so a later preferences change receives the same review as other staff access controls. Ask the support owner to identify tasks that need a planned reconnection or handoff, and include those instructions beside the approved duration. Keep any temporary exception time-bounded in the access record and restore the intended preference after the authorized work.\nVerification\nProposed verification: in an authorized test environment, set a short temporary limit and observe when a harmless session ends. Record its start and end times and confirm the documented reconnection procedure works. Restore the approved production value after testing, then inspect the saved preference rather than relying only on the edit screen.\nOfficial reference\nAWS — Specify maximum session duration. Reviewed October 20, 2026.",
                "datePublished": "2026-10-20T18:14:07+00:00",
                "dateModified": "2026-10-20T18:34:30+00:00",
                "mainEntityOfPage": {
                    "@id": "https://update.dsesecurity.com/updates/aws-ssm-session-manager-maximum-duration/"
                },
                "inLanguage": "en-US",
                "isAccessibleForFree": true,
                "author": {
                    "@type": "Organization",
                    "name": "DSE Security Editorial Team",
                    "url": "https://update.dsesecurity.com/#editorial-team"
                },
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "image": {
                    "@type": "ImageObject",
                    "@id": "https://update.dsesecurity.com/updates/aws-ssm-session-manager-maximum-duration/#primaryimage",
                    "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20",
                    "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20",
                    "width": 1200,
                    "height": 630,
                    "caption": "Set a total Session Manager duration for long-running staff sessions"
                },
                "articleSection": [
                    "Business Continuity",
                    "Cybersecurity",
                    "IT"
                ],
                "keywords": [
                    "Business Continuity",
                    "Cybersecurity",
                    "IT",
                    "Guide",
                    "Information priority"
                ],
                "genre": "Guide",
                "about": [
                    {
                        "@type": "Thing",
                        "name": "Business Continuity",
                        "url": "https://update.dsesecurity.com/topic/business-continuity/"
                    },
                    {
                        "@type": "Thing",
                        "name": "Cybersecurity",
                        "url": "https://update.dsesecurity.com/topic/cybersecurity/"
                    },
                    {
                        "@type": "Thing",
                        "name": "IT",
                        "url": "https://update.dsesecurity.com/topic/it/"
                    }
                ],
                "wordCount": 280,
                "timeRequired": "PT2M",
                "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
                "usageInfo": "https://update.dsesecurity.com/usage/",
                "copyrightHolder": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
                "citation": {
                    "@type": "CreativeWork",
                    "name": "AWS — Specify maximum session duration",
                    "url": "https://docs.aws.amazon.com/systems-manager/latest/userguide/session-preferences-max-timeout.html"
                }
            }
        ]
    }
}