Policy: AWSServiceRoleForSMS

ARN: arn:aws:iam::aws:policy/aws-service-role/AWSServiceRoleForSMS

Allowed Actions

Actions	Services
applicationinsights:CreateApplication	applicationinsights
applicationinsights:CreateComponent	applicationinsights
applicationinsights:DeleteApplication	applicationinsights
applicationinsights:DeleteComponent	applicationinsights
applicationinsights:Describe*	applicationinsights
applicationinsights:List*	applicationinsights
applicationinsights:UpdateApplication	applicationinsights
applicationinsights:UpdateComponentConfiguration	applicationinsights
cloudformation:CreateChangeSet	cloudformation
cloudformation:CreateStack	cloudformation
cloudformation:DeleteChangeSet	cloudformation
cloudformation:DeleteStack	cloudformation
cloudformation:DescribeChangeSet	cloudformation
cloudformation:DescribeStackEvents	cloudformation
cloudformation:DescribeStackResource	cloudformation
cloudformation:DescribeStackResources	cloudformation
cloudformation:DescribeStacks	cloudformation
cloudformation:ExecuteChangeSet	cloudformation
cloudformation:GetTemplate	cloudformation
cloudformation:ListStackResources	cloudformation
cloudformation:ValidateTemplate	cloudformation
ec2:AssociateIamInstanceProfile	ec2
ec2:CopyImage	ec2
ec2:CopySnapshot	ec2
ec2:CreateTags	ec2
ec2:CreateTags	ec2
ec2:DeleteSnapshot	ec2
ec2:DeleteTags	ec2
ec2:DeregisterImage	ec2
ec2:DescribeImages	ec2
ec2:DescribeImportImageTasks	ec2
ec2:DescribeInstances	ec2
ec2:DescribeSnapshotAttribute	ec2
ec2:DescribeSnapshots	ec2
ec2:DisassociateIamInstanceProfile	ec2
ec2:GetEbsEncryptionByDefault	ec2
ec2:ImportImage	ec2
ec2:ModifyInstanceAttribute	ec2
ec2:ModifySnapshotAttribute	ec2
ec2:ReplaceIamInstanceProfileAssociation	ec2
ec2:RunInstances	ec2
ec2:StartInstances	ec2
ec2:StopInstances	ec2
ec2:TerminateInstances	ec2
iam:CreateServiceLinkedRole	iam
iam:GetInstanceProfile	iam
iam:GetRole	iam
iam:PassRole	iam
iam:PassRole	iam
resource-groups:CreateGroup	resource-groups
resource-groups:DeleteGroup	resource-groups
resource-groups:GetGroup	resource-groups
resource-groups:UpdateGroup	resource-groups
s3:CreateBucket	s3
s3:DeleteBucket	s3
s3:DeleteObject	s3
s3:GetBucketAcl	s3
s3:GetBucketLocation	s3
s3:GetObject	s3
s3:ListAllMyBuckets	s3
s3:ListBucket	s3
s3:PutLifecycleConfiguration	s3
s3:PutObject	s3
s3:PutObjectAcl	s3
sms:CreateReplicationJob	sms
sms:DeleteReplicationJob	sms
sms:GetReplicationJobs	sms
sms:GetReplicationRuns	sms
sms:GetServers	sms
sms:ImportServerCatalog	sms
sms:StartOnDemandReplicationRun	sms
sms:UpdateReplicationJob	sms
ssm:CancelCommand	ssm
ssm:GetCommandInvocation	ssm
ssm:SendCommand	ssm
ssm:SendCommand	ssm