Skip to content

Policy: AWSQuickSetupPatchPolicyPermissionsBoundary

ARN: arn:aws:iam::aws:policy/AWSQuickSetupPatchPolicyPermissionsBoundary

Allowed Actions

Actions Services
compute-optimizer:GetEnrollmentStatus compute-optimizer
config:DescribeConfigurationRecorders config
ec2:AssociateIamInstanceProfile ec2
ec2:CreateTags ec2
ec2:DeleteTags ec2
ec2:DescribeIamInstanceProfileAssociations ec2
ec2:DescribeInstances ec2
ec2:DisassociateIamInstanceProfile ec2
iam:AddRoleToInstanceProfile iam
iam:AttachRolePolicy iam
iam:CreateInstanceProfile iam
iam:CreateRole iam
iam:CreateServiceLinkedRole iam
iam:DeleteRole iam
iam:DetachRolePolicy iam
iam:GetInstanceProfile iam
iam:GetRole iam
iam:GetRole iam
iam:GetRolePolicy iam
iam:ListInstanceProfilesForRole iam
iam:ListRoles iam
iam:ListRoles iam
iam:PassRole iam
iam:PassRole iam
iam:TagRole iam
iam:UntagRole iam
iam:UpdateRole iam
lambda:InvokeFunction lambda
logs:CreateLogStream logs
logs:PutLogEvents logs
s3:CreateBucket s3
s3:DeleteBucket s3
s3:DeleteObject s3
s3:DeleteObjectVersion s3
s3:Get* s3
s3:List* s3
s3:Put* s3
ssm:AddTagsToResource ssm
ssm:DescribeAssociation ssm
ssm:DescribeAssociation ssm
ssm:DescribeAssociationExecutions ssm
ssm:DescribeInstanceInformation ssm
ssm:GetAutomationExecution ssm
ssm:GetInventory ssm
ssm:GetPatchBaseline ssm
ssm:GetServiceSetting ssm
ssm:ListTagsForResource ssm
ssm:RemoveTagsFromResource ssm
ssm:StartAutomationExecution ssm
ssm:UpdateAssociation ssm
ssm:UpdateManagedInstanceRole ssm
ssm:UpdateServiceSetting ssm
support:DescribeTrustedAdvisorChecks support