A Config rule that checks if AWS Systems Manager documents owned by the account are public. This rule is NON_COMPLIANT if SSM documents with owner Self are public.

CloudFormation Template