Policy: AmazonEC2RoleforSSM

ARN: arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforSSM

Allowed Actions

Actions	Services
cloudwatch:PutMetricData	cloudwatch
ds:CreateComputer	ds
ds:DescribeDirectories	ds
ec2:DescribeInstanceStatus	ec2
ec2messages:AcknowledgeMessage	ec2messages
ec2messages:DeleteMessage	ec2messages
ec2messages:FailMessage	ec2messages
ec2messages:GetEndpoint	ec2messages
ec2messages:GetMessages	ec2messages
ec2messages:SendReply	ec2messages
logs:CreateLogGroup	logs
logs:CreateLogStream	logs
logs:DescribeLogGroups	logs
logs:DescribeLogStreams	logs
logs:PutLogEvents	logs
s3:AbortMultipartUpload	s3
s3:GetBucketLocation	s3
s3:GetEncryptionConfiguration	s3
s3:GetObject	s3
s3:ListBucket	s3
s3:ListBucketMultipartUploads	s3
s3:ListMultipartUploadParts	s3
s3:PutObject	s3
ssm:DescribeAssociation	ssm
ssm:DescribeDocument	ssm
ssm:GetDeployablePatchSnapshotForInstance	ssm
ssm:GetDocument	ssm
ssm:GetManifest	ssm
ssm:GetParameters	ssm
ssm:ListAssociations	ssm
ssm:ListInstanceAssociations	ssm
ssm:PutComplianceItems	ssm
ssm:PutConfigurePackageResult	ssm
ssm:PutInventory	ssm
ssm:UpdateAssociationStatus	ssm
ssm:UpdateInstanceAssociationStatus	ssm
ssm:UpdateInstanceInformation	ssm
ssmmessages:CreateControlChannel	ssmmessages
ssmmessages:CreateDataChannel	ssmmessages
ssmmessages:OpenControlChannel	ssmmessages
ssmmessages:OpenDataChannel	ssmmessages