Policy: SSMQuickSetupRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/SSMQuickSetupRolePolicy Allowed Actions Actions Services cloudformation:DeleteStackInstances cloudformation cloudformation:DeleteStackSet cloudformation cloudformation:DescribeStackInstance cloudformation cloudformation:DescribeStackSet cloudformation cloudformation:DescribeStackSetOperation cloudformation cloudformation:DescribeStacks cloudformation cloudformation:GetTemplate cloudformation cloudformation:ListStackInstances cloudformation cloudformation:ListStackSetOperationResults cloudformation cloudformation:ListStackSetOperations cloudformation cloudformation:ListStacks cloudformation organizations:ListAWSServiceAccessForOrganization organizations organizations:ListAccounts organizations organizations:ListAccountsForParent organizations organizations:ListDelegatedAdministrators organizations organizations:ListDelegatedServicesForAccount organizations organizations:ListOrganizationalUnitsForParent organizations organizations:ListRoots organizations ssm:DeleteResourceDataSync ssm ssm:DescribeAssociationExecutions ssm ssm:DescribeDocument ssm ssm:GetDocument ssm ssm:GetOpsSummary ssm ssm:ListAssociations ssm ssm:ListResourceDataSync ssm