Policy: AmazonSSMMaintenanceWindowRole ARN: arn:aws:iam::aws:policy/service-role/AmazonSSMMaintenanceWindowRole Allowed Actions Actions Services lambda:InvokeFunction lambda resource-groups:ListGroupResources resource-groups resource-groups:ListGroups resource-groups ssm:GetAutomationExecution ssm ssm:GetParameters ssm ssm:ListCommands ssm ssm:SendCommand ssm ssm:StartAutomationExecution ssm states:DescribeExecution states states:StartExecution states tag:GetResources tag