Policy: AWSQuickSetupSSMDeploymentRolePolicy ARN: arn:aws:iam::aws:policy/AWSQuickSetupSSMDeploymentRolePolicy Allowed Actions Actions Services cloudformation:CreateChangeSet cloudformation cloudformation:CreateStack cloudformation cloudformation:DeleteChangeSet cloudformation cloudformation:DeleteStack cloudformation cloudformation:DescribeChangeSet cloudformation cloudformation:DescribeStackDriftDetectionStatus cloudformation cloudformation:DescribeStackEvents cloudformation cloudformation:DescribeStackResourceDrifts cloudformation cloudformation:DescribeStacks cloudformation cloudformation:DetectStackDrift cloudformation cloudformation:DetectStackResourceDrift cloudformation cloudformation:ExecuteChangeSet cloudformation cloudformation:ListStacks cloudformation cloudformation:UpdateStack cloudformation iam:AttachRolePolicy iam iam:AttachRolePolicy iam iam:AttachRolePolicy iam iam:CreateRole iam iam:CreateServiceLinkedRole iam iam:DeleteRole iam iam:DetachRolePolicy iam iam:DetachRolePolicy iam iam:DetachRolePolicy iam iam:GetRole iam iam:GetRolePolicy iam iam:ListAttachedRolePolicies iam iam:ListRolePolicies iam iam:ListRoleTags iam iam:PassRole iam iam:PassRole iam iam:TagRole iam iam:UpdateRole iam lambda:CreateFunction lambda lambda:DeleteFunction lambda lambda:GetFunction lambda lambda:InvokeFunction lambda lambda:TagResource lambda lambda:UpdateFunction* lambda ssm:CreateAssociation ssm ssm:DeleteAssociation ssm ssm:DescribeAssociation ssm ssm:DescribeDocument ssm ssm:GetDocument ssm ssm:UpdateAssociation ssm