Skip to content
Permalink
Branch: master
Find file Copy path
Find file Copy path
Fetching contributors…
Cannot retrieve contributors at this time
94 lines (92 sloc) 19.3 KB
Action Description Resource Condition
ssm:AddTagsToResource Adds or overwrites one or more tags for the specified resource. arn:aws:ssm:$region:$account:document/$name -
ssm:CancelCommand Attempts to cancel the command specified by the Command ID. ??? -
ssm:CreateActivation Registers your on-premises server or virtual machine with Amazon EC2 so that you can manage these resources using Run Command. ??? -
ssm:CreateAssociation Associates the specified SSM document with the specified instance. arn:aws:ssm:$region:$account:document/$name -
ssm:CreateAssociationBatch Associates the specified SSM document with the specified instances. arn:aws:ssm:$region:$account:document/$name -
ssm:CreateDocument Creates an SSM document. ??? -
ssm:CreateMaintenanceWindow Create an SSM maintenance window. ??? -
ssm:CreatePatchBaseline Create a SSM patch baseline. ??? -
ssm:CreateResourceDataSync Creates a resource data sync configuration to a single bucket in Amazon S3. ??? -
ssm:DeleteActivation Deletes an activation. ??? -
ssm:DeleteAssociation Disassociates the specified SSM document from the specified instance. arn:aws:ssm:$region:$account:document/$name -
ssm:DeleteDocument Deletes the SSM document and all instance associations to the document. arn:aws:ssm:$region:$account:document/$name -
ssm:DeleteMaintenanceWindow Delete an SSM maintenance window. arn:aws:ssm:$region:$account:maintenancewindow/$resource-id -
ssm:DeleteParameter Delete a parameter from the system. arn:aws:ssm:$region:$account:parameter/$name -
ssm:DeleteParameters Delete a list of parameters. arn:aws:ssm:$region:$account:parameter/$name -
ssm:DeletePatchBaseline Delete a SSM patch baseline. arn:aws:ssm:$region:$account:patchbaseline/$resource-id -
ssm:DeleteResourceDataSync Deletes a Resource Data Sync configuration. ??? -
ssm:DeregisterManagedInstance Removes the server or virtual machine from the list of registered servers. arn:aws:ssm:$region:$account:managed-instance/$managed-instance-name -
ssm:DeregisterPatchBaselineForPatchGroup Deregister a SSM patch baseline from a patch group. arn:aws:ssm:$region:$account:patchbaseline/$resource-id -
ssm:DeregisterTargetFromMaintenanceWindow Deregister a target from SSM maintenance window. arn:aws:ssm:$region:$account:maintenancewindow/$resource-id -
ssm:DeregisterTaskFromMaintenanceWindow Deregister a task from SSM maintenance window. arn:aws:ssm:$region:$account:maintenancewindow/$resource-id -
ssm:DescribeActivations Details about the activation, including: the date and time the activation was created, the expiration date, the IAM role assigned to the instances in the activation, and the number of instances activated by this registration. ??? -
ssm:DescribeAssociation Describes the associations for the specified SSM document or instance. arn:aws:ssm:$region:$account:document/$name -
ssm:DescribeAvailablePatches Describes one or more available patches. ??? -
ssm:DescribeDocument Describes the specified SSM document. arn:aws:ssm:$region:$account:document/$name -
ssm:DescribeDocumentParameters Describes the parameters for an SSM document. arn:aws:ssm:$region:$account:document/$name -
ssm:DescribeDocumentPermission Describes the permissions for an SSM document. arn:aws:ssm:$region:$account:document/$name -
ssm:DescribeEffectivePatchesForPatchBaseline Describes the the evaluation of patch baseline for patches and corresponding state. arn:aws:ssm:$region:$account:patchbaseline/$resource-id -
ssm:DescribeInstanceInformation Describes one or more of your instances. arn:aws:ssm:$region:$account:document/$name -
ssm:DescribeInstancePatchStates Describe one or more of your instance patch states. One per each instance ID. ??? -
ssm:DescribeInstancePatchStatesForPatchGroup Describe one or more of your instance patch states over all instances in given patch group. ??? -
ssm:DescribeInstancePatches Describe one or more of your instance patch states for a given instance ID. ??? -
ssm:DescribeInstanceProperties Describes one or more your instances. arn:aws:ssm:$region:$account:document/$name -
ssm:DescribeMaintenanceWindowExecutionTaskInvocations Describe one or more of your maintenance window execution task invocations history. ??? -
ssm:DescribeMaintenanceWindowExecutionTasks Describe one or more of your maintenance window execution tasks history. ??? -
ssm:DescribeMaintenanceWindowExecutions Describe one or more of your maintenance window execution history. arn:aws:ssm:$region:$account:maintenancewindow/$resource-id -
ssm:DescribeMaintenanceWindowTargets Describe one or more of your maintenance windows targets. arn:aws:ssm:$region:$account:maintenancewindow/$resource-id -
ssm:DescribeMaintenanceWindowTasks Describe one or more of your maintenance windows tasks. arn:aws:ssm:$region:$account:maintenancewindow/$resource-id -
ssm:DescribeMaintenanceWindows Describe one or more of your maintenance windows. ??? -
ssm:DescribeParameters Describes one or more parameters in Parameter Store. * -
ssm:DescribePatchBaselines Describes one or more SSM patch baselines. ??? -
ssm:DescribePatchGroupState Get a high level patch state report of given patch group. ??? -
ssm:DescribePatchGroups Describes one or more patch group to SSM patch baseline mappings. ??? -
ssm:DescribeSessions Describe one or more Session Manager sessions. ??? -
ssm:GetAutomationExecution ??? -
ssm:GetConnectionStatus Get the connection status for an instance. ??? -
ssm:GetDefaultPatchBaseline Get the default SSM patch baseline. arn:aws:ssm:$region:$account:patchbaseline/$resource-id -
ssm:GetDeployablePatchSnapshotForInstance Get the snapshot of patches to be installed for given instances. ??? -
ssm:GetDocument Gets the contents of the specified SSM document. arn:aws:ssm:$region:$account:document/$name -
ssm:GetMaintenanceWindow Get a SSM maintenance window. arn:aws:ssm:$region:$account:maintenancewindow/$resource-id -
ssm:GetMaintenanceWindowExecution Get a SSM maintenance window execution. ??? -
ssm:GetMaintenanceWindowExecutionTask Get a SSM maintenance window execution task. ??? -
ssm:GetMaintenanceWindowExecutionTaskInvocation Get a SSM maintenance window execution task invocation. ??? -
ssm:GetMaintenanceWindowTask Get a SSM maintenance window task. arn:aws:ssm:$region:$account:maintenancewindow/$resource-id,arn:aws:ssm:$region:$account:windowtask/$resource-id -
ssm:GetManifest Fetches the installation description for a package. ??? -
ssm:GetParameter Get information about a parameter by using the parameter name. arn:aws:ssm:$region:$account:parameter/$name ssm:resourceTag/tag-key
ssm:GetParameterHistory Query a list of all parameters used by the AWS account. arn:aws:ssm:$region:$account:parameter/$name ssm:resourceTag/tag-key
ssm:GetParameters Get details of a parameter. arn:aws:ssm:$region:$account:parameter/$name ssm:resourceTag/tag-key
ssm:GetParametersByPath Retrieve parameters in a specific hierarchy. arn:aws:ssm:$region:$account:parameter/$name -
ssm:GetPatchBaseline Get a SSM patch baseline arn:aws:ssm:$region:$account:patchbaseline/$resource-id -
ssm:GetPatchBaselineForPatchGroup Get the SSM patch baseline associated to the given patch group. arn:aws:ssm:$region:$account:patchbaseline/$resource-id -
ssm:ListAssociationVersions Lists versions of the specified association. ??? -
ssm:ListAssociations Lists the associations for the specified SSM document or instance. ??? -
ssm:ListCommandInvocations An invocation is copy of a command sent to a specific instance. ??? -
ssm:ListCommands Lists the commands requested by users of the AWS account. ??? -
ssm:ListDocuments Describes one or more of your SSM documents. ??? -
ssm:ListTagsForResource Returns a list of the tags assigned to the specified resource. arn:aws:ssm:$region:$account:document/$name -
ssm:ModifyDocumentPermission Share a document publicly or privately. arn:aws:ssm:$region:$account:document/$name -
ssm:PutComplianceItems Registers a compliance type and other compliance details on a designated resource. ??? -
ssm:PutConfigurePackageResult Reports installation result for a package. ??? -
ssm:PutParameter Add one or more parameters to the system. arn:aws:ssm:$region:$account:parameter/$name -
ssm:RegisterDefaultPatchBaseline Register a SSM patch baseline as the default. arn:aws:ssm:$region:$account:patchbaseline/$resource-id -
ssm:RegisterPatchBaselineForPatchGroup Register a SSM patch baseline to a patch group. arn:aws:ssm:$region:$account:patchbaseline/$resource-id -
ssm:RegisterTargetWithMaintenanceWindow Register a SSM window target to a maintenance window. arn:aws:ssm:$region:$account:maintenancewindow/$resource-id -
ssm:RegisterTaskWithMaintenanceWindow Register a SSM window task to a maintenance window. arn:aws:ssm:$region:$account:maintenancewindow/$resource-id -
ssm:RemoveTagsFromResource Removes all tags from the specified resource. arn:aws:ssm:$region:$account:document/$name -
ssm:ResumeSession Resume a disconnected SSM session manager connection. arn:aws:ssm:$region:$account:session/$resource-id -
ssm:SendAutomationSignal ??? -
ssm:SendCommand Executes commands (via command documents) on one or more remote instances. arn:aws:ssm:$region:$account:document/$name,arn:aws:ec2:::instance/* ssm:resourceTag/tag-key
ssm:StartAutomationExecution Initiates execution of an Automation document. ??? -
ssm:StartSession Start a connection to an instance using SSM Session Manager. ??? -
ssm:StopAutomationExecution Stop an Automation that is currently executing. ??? -
ssm:TerminateSession Terminate an ongoing SSM Session Manager connection. arn:aws:ssm:$region:$account:session/$resource-id -
ssm:UpdateAssociationStatus Updates the status of the SSM document associated with the specified instance. arn:aws:ssm:$region:$account:document/$name -
ssm:UpdateInstanceInformation Updates the status of the SSM document associated with the specified instance. arn:aws:ssm:$region:$account:document/$name -
ssm:UpdateMaintenanceWindow Update a SSM maintenance window. arn:aws:ssm:$region:$account:maintenancewindow/$resource-id -
ssm:UpdateMaintenanceWindowTarget Update a SSM maintenance window target. arn:aws:ssm:$region:$account:maintenancewindow/$resource-id,arn:aws:ssm:$region:$account:windowtarget/$resource-id -
ssm:UpdateMaintenanceWindowTask Update a SSM maintenance window task. arn:aws:ssm:$region:$account:maintenancewindow/$resource-id,arn:aws:ssm:$region:$account:windowtarget/$resource-id -
ssm:UpdateManagedInstanceRole Assigns or changes an Amazon Identity and Access Management (IAM) role to the managed instance. arn:aws:ssm:$region:$account:maintenancewindow/$resource-id -
ssm:UpdatePatchBaseline Update a SSM patch baseline. arn:aws:ssm:$region:$account:patchbaseline/$resource-id -
You can’t perform that action at this time.