Policy: AWS-SSM-DiagnosisAutomation-AdministrationRolePolicy ARN: arn:aws:iam::aws:policy/AWS-SSM-DiagnosisAutomation-AdministrationRolePolicy Allowed Actions Actions Services iam:PassRole iam kms:Decrypt kms kms:GenerateDataKey kms s3:DeleteObject s3 s3:GetObject s3 s3:ListBucket s3 s3:PutObject s3 ssm:DescribeAutomationExecutions ssm ssm:DescribeAutomationStepExecutions ssm ssm:GetAutomationExecution ssm ssm:StartAutomationExecution ssm sts:AssumeRole sts