Policy: AWSSystemsManagerChangeManagementServicePolicy

ARN: arn:aws:iam::aws:policy/aws-service-role/AWSSystemsManagerChangeManagementServicePolicy

Allowed Actions

Actions	Services
cloudwatch:DescribeAlarms	cloudwatch
iam:GetGroup	iam
iam:PassRole	iam
ssm:CreateAssociation	ssm
ssm:CreateOpsItem	ssm
ssm:DeleteAssociation	ssm
ssm:GetAutomationExecution	ssm
ssm:GetCalendarState	ssm
ssm:GetDocument	ssm
ssm:GetOpsItem	ssm
ssm:StartAutomationExecution	ssm
ssm:StopAutomationExecution	ssm
ssm:UpdateOpsItem	ssm
sso:ListDirectoryAssociations	sso
sso-directory:DescribeUsers	sso-directory
sso-directory:IsMemberInGroup	sso-directory