Update detected

zoph-io · Jul 10, 2024 · aec4d23 · aec4d23
1 parent 05b6c52
commit aec4d23
Showing 1 changed file with 18 additions and 2 deletions.
diff --git a/policies/AWSSystemsManagerForSAPFullAccess b/policies/AWSSystemsManagerForSAPFullAccess
@@ -4,13 +4,15 @@
             "Version": "2012-10-17",
             "Statement": [
                 {
+                    "Sid": "AwsSsmForSapPermissions",
                     "Effect": "Allow",
                     "Action": [
                         "ssm-sap:*"
                     ],
                     "Resource": "arn:*:ssm-sap:*:*:*"
                 },
                 {
+                    "Sid": "AwsSsmForSapServiceRoleCreationPermission",
                     "Effect": "Allow",
                     "Action": [
                         "iam:CreateServiceLinkedRole"
@@ -23,11 +25,25 @@
                             "iam:AWSServiceName": "ssm-sap.amazonaws.com"
                         }
                     }
+                },
+                {
+                    "Sid": "Ec2StartStopPermission",
+                    "Effect": "Allow",
+                    "Action": [
+                        "ec2:StartInstances",
+                        "ec2:StopInstances"
+                    ],
+                    "Resource": "arn:aws:ec2:*:*:instance/*",
+                    "Condition": {
+                        "StringEqualsIgnoreCase": {
+                            "ec2:resourceTag/SSMForSAPManaged": "True"
+                        }
+                    }
                 }
             ]
         },
-        "VersionId": "v2",
+        "VersionId": "v3",
         "IsDefaultVersion": true,
-        "CreateDate": "2022-11-18T21:58:54+00:00"
+        "CreateDate": "2024-07-10T21:54:54+00:00"
     }
 }