Policy: AWSQuickSetupPatchPolicyPermissionsBoundary ARN: arn:aws:iam::aws:policy/AWSQuickSetupPatchPolicyPermissionsBoundary Allowed Actions Actions Services compute-optimizer:GetEnrollmentStatus compute-optimizer config:DescribeConfigurationRecorders config ec2:AssociateIamInstanceProfile ec2 ec2:CreateTags ec2 ec2:DeleteTags ec2 ec2:DescribeIamInstanceProfileAssociations ec2 ec2:DescribeInstances ec2 ec2:DisassociateIamInstanceProfile ec2 iam:AddRoleToInstanceProfile iam iam:AttachRolePolicy iam iam:CreateInstanceProfile iam iam:CreateRole iam iam:CreateServiceLinkedRole iam iam:DeleteRole iam iam:DetachRolePolicy iam iam:GetInstanceProfile iam iam:GetRole iam iam:GetRole iam iam:GetRolePolicy iam iam:ListInstanceProfilesForRole iam iam:ListRoles iam iam:ListRoles iam iam:PassRole iam iam:PassRole iam iam:TagRole iam iam:UntagRole iam iam:UpdateRole iam lambda:InvokeFunction lambda logs:CreateLogStream logs logs:PutLogEvents logs s3:CreateBucket s3 s3:DeleteBucket s3 s3:DeleteObject s3 s3:DeleteObjectVersion s3 s3:Get* s3 s3:List* s3 s3:Put* s3 ssm:AddTagsToResource ssm ssm:DescribeAssociation ssm ssm:DescribeAssociation ssm ssm:DescribeAssociationExecutions ssm ssm:DescribeInstanceInformation ssm ssm:GetAutomationExecution ssm ssm:GetInventory ssm ssm:GetPatchBaseline ssm ssm:GetServiceSetting ssm ssm:ListTagsForResource ssm ssm:RemoveTagsFromResource ssm ssm:StartAutomationExecution ssm ssm:UpdateAssociation ssm ssm:UpdateManagedInstanceRole ssm ssm:UpdateServiceSetting ssm support:DescribeTrustedAdvisorChecks support