npm - aws-iam-language-server - Versions diffs - 0.0.16 → 0.0.17 - Mend

aws-iam-language-server 0.0.16 → 0.0.17

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (432) hide show

package/src/data/servicereference/services/ssm.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"name":"ssm","actions":{"AddTagsToResource":{"name":"AddTagsToResource","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"association"},{"name":"automation-execution"},{"name":"document"},{"name":"instance"},{"name":"maintenancewindow"},{"name":"managed-instance"},{"name":"opsitem"},{"name":"opsmetadata"},{"name":"parameter"},{"name":"patchbaseline"},{"name":"task"}],"description":"Grants permission to add or overwrite one or more tags for a specified AWS resource","accessLevel":"Tagging","resourceTypes":[{"name":"association","required":false},{"name":"automation-execution","required":false},{"name":"document","required":false},{"name":"instance","required":false},{"name":"maintenancewindow","required":false},{"name":"managed-instance","required":false},{"name":"opsitem","required":false},{"name":"opsmetadata","required":false},{"name":"parameter","required":false},{"name":"patchbaseline","required":false},{"name":"task","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_AddTagsToResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-AddTagsToResource"},"AssociateOpsItemRelatedItem":{"name":"AssociateOpsItemRelatedItem","service":"ssm","conditionKeys":[],"resources":[{"name":"opsitem"}],"description":"Grants permission to associate RelatedItem to an OpsItem","accessLevel":"Write","resourceTypes":[{"name":"opsitem","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_AssociateOpsItemRelatedItem.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-AssociateOpsItemRelatedItem"},"CancelCommand":{"name":"CancelCommand","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to cancel a specified Run Command command","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CancelCommand.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-CancelCommand"},"CancelMaintenanceWindowExecution":{"name":"CancelMaintenanceWindowExecution","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"}],"description":"Grants permission to cancel an in-progress maintenance window execution","accessLevel":"Write","resourceTypes":[{"name":"maintenancewindow","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CancelMaintenanceWindowExecution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-CancelMaintenanceWindowExecution"},"CreateActivation":{"name":"CreateActivation","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an activation that is used to register on-premises servers and virtual machines (VMs) with Systems Manager","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateActivation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-CreateActivation"},"CreateAssociation":{"name":"CreateAssociation","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"association"},{"name":"document"},{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to associate a specified Systems Manager document with specified instances or other targets","accessLevel":"Write","resourceTypes":[{"name":"association","required":true},{"name":"document","required":true},{"name":"instance","required":false},{"name":"managed-instance","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-CreateAssociation"},"CreateAssociationBatch":{"name":"CreateAssociationBatch","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"document"},{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to combine entries for multiple CreateAssociation operations in a single command","accessLevel":"Write","resourceTypes":[{"name":"document","required":true},{"name":"instance","required":false},{"name":"managed-instance","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateAssociationBatch.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-CreateAssociationBatch"},"CreateDocument":{"name":"CreateDocument","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","ssm:DocumentType"],"resources":[{"name":"document"}],"description":"Grants permission to create a Systems Manager SSM document","accessLevel":"Write","resourceTypes":[{"name":"document","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateDocument.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-CreateDocument"},"CreateMaintenanceWindow":{"name":"CreateMaintenanceWindow","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a maintenance window","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateMaintenanceWindow.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-CreateMaintenanceWindow"},"CreateOpsItem":{"name":"CreateOpsItem","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an OpsItem in OpsCenter","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateOpsItem.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-CreateOpsItem"},"CreateOpsMetadata":{"name":"CreateOpsMetadata","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an OpsMetadata object for an AWS resource","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateOpsMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-CreateOpsMetadata"},"CreatePatchBaseline":{"name":"CreatePatchBaseline","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a patch baseline","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreatePatchBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-CreatePatchBaseline"},"CreateResourceDataSync":{"name":"CreateResourceDataSync","service":"ssm","conditionKeys":["ssm:SyncType"],"resources":[{"name":"resourcedatasync"}],"description":"Grants permission to create a resource data sync configuration, which regularly collects inventory data from managed instances and updates the data in an Amazon S3 bucket","accessLevel":"Write","resourceTypes":[{"name":"resourcedatasync","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateResourceDataSync.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-CreateResourceDataSync"},"DeleteActivation":{"name":"DeleteActivation","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to delete a specified activation for managed instances","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteActivation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeleteActivation"},"DeleteAssociation":{"name":"DeleteAssociation","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"},{"name":"document"},{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to disassociate a specified SSM document from a specified instance","accessLevel":"Write","resourceTypes":[{"name":"association","required":false},{"name":"document","required":false},{"name":"instance","required":false},{"name":"managed-instance","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeleteAssociation"},"DeleteDocument":{"name":"DeleteDocument","service":"ssm","conditionKeys":["ssm:DocumentType"],"resources":[{"name":"document"}],"description":"Grants permission to delete a specified SSM document and its instance associations","accessLevel":"Write","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteDocument.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeleteDocument"},"DeleteInventory":{"name":"DeleteInventory","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to delete a specified custom inventory type, or the data associated with a custom inventory type","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteInventory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeleteInventory"},"DeleteMaintenanceWindow":{"name":"DeleteMaintenanceWindow","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"}],"description":"Grants permission to delete a specified maintenance window","accessLevel":"Write","resourceTypes":[{"name":"maintenancewindow","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteMaintenanceWindow.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeleteMaintenanceWindow"},"DeleteOpsItem":{"name":"DeleteOpsItem","service":"ssm","conditionKeys":[],"resources":[{"name":"opsitem"}],"description":"Grants permission to delete an OpsItem","accessLevel":"Write","resourceTypes":[{"name":"opsitem","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteOpsItem.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeleteOpsItem"},"DeleteOpsMetadata":{"name":"DeleteOpsMetadata","service":"ssm","conditionKeys":[],"resources":[{"name":"opsmetadata"}],"description":"Grants permission to delete an OpsMetadata object","accessLevel":"Write","resourceTypes":[{"name":"opsmetadata","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteOpsMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeleteOpsMetadata"},"DeleteParameter":{"name":"DeleteParameter","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"parameter"}],"description":"Grants permission to delete a specified SSM parameter","accessLevel":"Write","resourceTypes":[{"name":"parameter","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteParameter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeleteParameter"},"DeleteParameters":{"name":"DeleteParameters","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"parameter"}],"description":"Grants permission to delete multiple specified SSM parameters","accessLevel":"Write","resourceTypes":[{"name":"parameter","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteParameters.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeleteParameters"},"DeletePatchBaseline":{"name":"DeletePatchBaseline","service":"ssm","conditionKeys":[],"resources":[{"name":"patchbaseline"}],"description":"Grants permission to delete a specified patch baseline","accessLevel":"Write","resourceTypes":[{"name":"patchbaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeletePatchBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeletePatchBaseline"},"DeleteResourceDataSync":{"name":"DeleteResourceDataSync","service":"ssm","conditionKeys":["ssm:SyncType"],"resources":[{"name":"resourcedatasync"}],"description":"Grants permission to delete a specified resource data sync","accessLevel":"Write","resourceTypes":[{"name":"resourcedatasync","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteResourceDataSync.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeleteResourceDataSync"},"DeleteResourcePolicy":{"name":"DeleteResourcePolicy","service":"ssm","conditionKeys":[],"resources":[{"name":"document"},{"name":"opsitemgroup"},{"name":"parameter"}],"description":"Grants permission to delete a Systems Manager resource policy","accessLevel":"Permissions management","resourceTypes":[{"name":"document","required":false},{"name":"opsitemgroup","required":false},{"name":"parameter","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeleteResourcePolicy"},"DeregisterManagedInstance":{"name":"DeregisterManagedInstance","service":"ssm","conditionKeys":["ssm:resourceTag/tag-key"],"resources":[{"name":"managed-instance"}],"description":"Grants permission to deregister a specified on-premises server or virtual machine (VM) from Systems Manager","accessLevel":"Write","resourceTypes":[{"name":"managed-instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeregisterManagedInstance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeregisterManagedInstance"},"DeregisterPatchBaselineForPatchGroup":{"name":"DeregisterPatchBaselineForPatchGroup","service":"ssm","conditionKeys":[],"resources":[{"name":"patchbaseline"}],"description":"Grants permission to deregister a specified patch baseline from being the default patch baseline for a specified patch group","accessLevel":"Write","resourceTypes":[{"name":"patchbaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeregisterPatchBaselineForPatchGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeregisterPatchBaselineForPatchGroup"},"DeregisterTargetFromMaintenanceWindow":{"name":"DeregisterTargetFromMaintenanceWindow","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"},{"name":"windowtarget"}],"description":"Grants permission to deregister a specified target from a maintenance window","accessLevel":"Write","resourceTypes":[{"name":"maintenancewindow","required":true},{"name":"windowtarget","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeregisterTargetFromMaintenanceWindow.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeregisterTargetFromMaintenanceWindow"},"DeregisterTaskFromMaintenanceWindow":{"name":"DeregisterTaskFromMaintenanceWindow","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"},{"name":"windowtask"}],"description":"Grants permission to deregister a specified task from a maintenance window","accessLevel":"Write","resourceTypes":[{"name":"maintenancewindow","required":true},{"name":"windowtask","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeregisterTaskFromMaintenanceWindow.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeregisterTaskFromMaintenanceWindow"},"DescribeActivations":{"name":"DescribeActivations","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about a specified managed instance activation, such as when it was created and the number of instances registered using the activation","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeActivations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeActivations"},"DescribeAssociation":{"name":"DescribeAssociation","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"},{"name":"document"},{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to view details about the specified association for a specified instance or target","accessLevel":"Read","resourceTypes":[{"name":"association","required":false},{"name":"document","required":false},{"name":"instance","required":false},{"name":"managed-instance","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeAssociation"},"DescribeAssociationExecutionTargets":{"name":"DescribeAssociationExecutionTargets","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"}],"description":"Grants permission to view information about a specified association execution","accessLevel":"Read","resourceTypes":[{"name":"association","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAssociationExecutionTargets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeAssociationExecutionTargets"},"DescribeAssociationExecutions":{"name":"DescribeAssociationExecutions","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"}],"description":"Grants permission to view all executions for a specified association","accessLevel":"Read","resourceTypes":[{"name":"association","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAssociationExecutions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeAssociationExecutions"},"DescribeAutomationExecutions":{"name":"DescribeAutomationExecutions","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about all active and terminated Automation executions","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAutomationExecutions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeAutomationExecutions"},"DescribeAutomationStepExecutions":{"name":"DescribeAutomationStepExecutions","service":"ssm","conditionKeys":[],"resources":[{"name":"automation-execution"}],"description":"Grants permission to view information about all active and terminated step executions in an Automation workflow","accessLevel":"Read","resourceTypes":[{"name":"automation-execution","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAutomationStepExecutions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeAutomationStepExecutions"},"DescribeAvailablePatches":{"name":"DescribeAvailablePatches","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view all patches eligible to include in a patch baseline","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAvailablePatches.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeAvailablePatches"},"DescribeDocument":{"name":"DescribeDocument","service":"ssm","conditionKeys":["ssm:DocumentType"],"resources":[{"name":"document"}],"description":"Grants permission to view details about a specified SSM document","accessLevel":"Read","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeDocument.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeDocument"},"DescribeDocumentParameters":{"name":"DescribeDocumentParameters","service":"ssm","conditionKeys":[],"resources":[{"name":"document"}],"description":"Grants permission to display information about SSM document parameters in the Systems Manager console (internal Systems Manager action)","accessLevel":"Read","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeDocumentParameters"},"DescribeDocumentPermission":{"name":"DescribeDocumentPermission","service":"ssm","conditionKeys":["ssm:DocumentType"],"resources":[{"name":"document"}],"description":"Grants permission to view the permissions for a specified SSM document","accessLevel":"Read","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeDocumentPermission.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeDocumentPermission"},"DescribeEffectiveInstanceAssociations":{"name":"DescribeEffectiveInstanceAssociations","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to view all current associations for a specified instance","accessLevel":"Read","resourceTypes":[{"name":"instance","required":true},{"name":"managed-instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeEffectiveInstanceAssociations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeEffectiveInstanceAssociations"},"DescribeEffectivePatchesForPatchBaseline":{"name":"DescribeEffectivePatchesForPatchBaseline","service":"ssm","conditionKeys":[],"resources":[{"name":"patchbaseline"}],"description":"Grants permission to view details about the patches currently associated with the specified patch baseline (Windows only)","accessLevel":"Read","resourceTypes":[{"name":"patchbaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeEffectivePatchesForPatchBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeEffectivePatchesForPatchBaseline"},"DescribeInstanceAssociationsStatus":{"name":"DescribeInstanceAssociationsStatus","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to view the status of the associations for a specified instance","accessLevel":"Read","resourceTypes":[{"name":"instance","required":true},{"name":"managed-instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstanceAssociationsStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeInstanceAssociationsStatus"},"DescribeInstanceInformation":{"name":"DescribeInstanceInformation","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about a specified instance","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstanceInformation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeInstanceInformation"},"DescribeInstancePatchStates":{"name":"DescribeInstancePatchStates","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/${TagKey}"],"resources":[{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to view status details about patches on a specified instance","accessLevel":"Read","resourceTypes":[{"name":"instance","required":true},{"name":"managed-instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstancePatchStates.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeInstancePatchStates"},"DescribeInstancePatchStatesForPatchGroup":{"name":"DescribeInstancePatchStatesForPatchGroup","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to describe the high-level patch state for the instances in the specified patch group","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstancePatchStatesForPatchGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeInstancePatchStatesForPatchGroup"},"DescribeInstancePatches":{"name":"DescribeInstancePatches","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/${TagKey}"],"resources":[{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to view general details about the patches on a specified instance","accessLevel":"Read","resourceTypes":[{"name":"instance","required":true},{"name":"managed-instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstancePatches.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeInstancePatches"},"DescribeInstanceProperties":{"name":"DescribeInstanceProperties","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to user's Amazon EC2 console to render managed instances' nodes","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeInstanceProperties"},"DescribeInventoryDeletions":{"name":"DescribeInventoryDeletions","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about a specified inventory deletion","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInventoryDeletions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeInventoryDeletions"},"DescribeMaintenanceWindowExecutionTaskInvocations":{"name":"DescribeMaintenanceWindowExecutionTaskInvocations","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details of a specified task execution for a maintenance window","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowExecutionTaskInvocations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeMaintenanceWindowExecutionTaskInvocations"},"DescribeMaintenanceWindowExecutionTasks":{"name":"DescribeMaintenanceWindowExecutionTasks","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about the tasks that ran during a specified maintenance window execution","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowExecutionTasks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeMaintenanceWindowExecutionTasks"},"DescribeMaintenanceWindowExecutions":{"name":"DescribeMaintenanceWindowExecutions","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"}],"description":"Grants permission to view the executions of a specified maintenance window","accessLevel":"List","resourceTypes":[{"name":"maintenancewindow","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowExecutions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeMaintenanceWindowExecutions"},"DescribeMaintenanceWindowSchedule":{"name":"DescribeMaintenanceWindowSchedule","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about upcoming executions of a specified maintenance window","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowSchedule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeMaintenanceWindowSchedule"},"DescribeMaintenanceWindowTargets":{"name":"DescribeMaintenanceWindowTargets","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"}],"description":"Grants permission to view a list of the targets associated with a specified maintenance window","accessLevel":"List","resourceTypes":[{"name":"maintenancewindow","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowTargets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeMaintenanceWindowTargets"},"DescribeMaintenanceWindowTasks":{"name":"DescribeMaintenanceWindowTasks","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"}],"description":"Grants permission to view a list of the tasks associated with a specified maintenance window","accessLevel":"List","resourceTypes":[{"name":"maintenancewindow","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowTasks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeMaintenanceWindowTasks"},"DescribeMaintenanceWindows":{"name":"DescribeMaintenanceWindows","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view information about all or specified maintenance windows","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindows.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeMaintenanceWindows"},"DescribeMaintenanceWindowsForTarget":{"name":"DescribeMaintenanceWindowsForTarget","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view information about the maintenance window targets and tasks associated with a specified instance","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowsForTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeMaintenanceWindowsForTarget"},"DescribeOpsItems":{"name":"DescribeOpsItems","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about specified OpsItems","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeOpsItems.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeOpsItems"},"DescribeParameters":{"name":"DescribeParameters","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about a specified SSM parameter","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeParameters.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeParameters"},"DescribePatchBaselines":{"name":"DescribePatchBaselines","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view information about patch baselines that meet the specified criteria","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribePatchBaselines.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribePatchBaselines"},"DescribePatchGroupState":{"name":"DescribePatchGroupState","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view aggregated status details for patches for a specified patch group","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribePatchGroupState.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribePatchGroupState"},"DescribePatchGroups":{"name":"DescribePatchGroups","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view information about the patch baseline for a specified patch group","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribePatchGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribePatchGroups"},"DescribePatchProperties":{"name":"DescribePatchProperties","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details of available patches for a specified operating system and patch property","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribePatchProperties.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribePatchProperties"},"DescribeSessions":{"name":"DescribeSessions","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view a list of recent Session Manager sessions that meet the specified search criteria","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeSessions"},"DisassociateOpsItemRelatedItem":{"name":"DisassociateOpsItemRelatedItem","service":"ssm","conditionKeys":[],"resources":[{"name":"opsitem"}],"description":"Grants permission to disassociate RelatedItem from an OpsItem","accessLevel":"Write","resourceTypes":[{"name":"opsitem","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DisassociateOpsItemRelatedItem.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DisassociateOpsItemRelatedItem"},"ExecuteAPI":{"name":"ExecuteAPI","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to a Systems Manager delegated administrator to view related resource details about OpsItems across multiple AWS accounts in the AWS Management Console","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html#systems-manager-namespace-other-API-operations","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ExecuteAPI"},"GetAccessToken":{"name":"GetAccessToken","service":"ssm","conditionKeys":[],"resources":[{"name":"opsitem"}],"description":"Grants permission to return a credentials set to be used with just-in-time node access","accessLevel":"Read","resourceTypes":[{"name":"opsitem","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetAccessToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetAccessToken"},"GetAutomationExecution":{"name":"GetAutomationExecution","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"automation-execution"}],"description":"Grants permission to view details of a specified Automation execution","accessLevel":"Read","resourceTypes":[{"name":"automation-execution","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_AutomationExecution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetAutomationExecution"},"GetCalendar":{"name":"GetCalendar","service":"ssm","conditionKeys":[],"resources":[{"name":"document"}],"description":"Grants permission to view details of a specific calendar","accessLevel":"Read","resourceTypes":[{"name":"document","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-change-calendar-prereqs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetCalendar"},"GetCalendarState":{"name":"GetCalendarState","service":"ssm","conditionKeys":[],"resources":[{"name":"document"}],"description":"Grants permission to view the calendar state for a change calendar or a list of change calendars","accessLevel":"Read","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetCalendarState.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetCalendarState"},"GetCommandInvocation":{"name":"GetCommandInvocation","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about the command execution of a specified invocation or plugin","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetCommandInvocation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetCommandInvocation"},"GetConnectionStatus":{"name":"GetConnectionStatus","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/${TagKey}"],"resources":[{"name":"instance"},{"name":"managed-instance"},{"name":"task"}],"description":"Grants permission to view the Session Manager connection status for a specified managed instance","accessLevel":"Read","resourceTypes":[{"name":"instance","required":false},{"name":"managed-instance","required":false},{"name":"task","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetConnectionStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetConnectionStatus"},"GetDefaultPatchBaseline":{"name":"GetDefaultPatchBaseline","service":"ssm","conditionKeys":[],"resources":[{"name":"patchbaseline"}],"description":"Grants permission to view the current default patch baseline for a specified operating system type","accessLevel":"Read","resourceTypes":[{"name":"patchbaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetDefaultPatchBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetDefaultPatchBaseline"},"GetDeployablePatchSnapshotForInstance":{"name":"GetDeployablePatchSnapshotForInstance","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the current patch baseline snapshot for a specified instance","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetDeployablePatchSnapshotForInstance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetDeployablePatchSnapshotForInstance"},"GetDocument":{"name":"GetDocument","service":"ssm","conditionKeys":["ssm:DocumentCategories","ssm:DocumentType"],"resources":[{"name":"document"}],"description":"Grants permission to view the contents of a specified SSM document","accessLevel":"Read","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetDocument.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetDocument"},"GetExecutionPreview":{"name":"GetExecutionPreview","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an existing preview that shows the effects that running a specified Automation runbook would have on the targeted resources","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetExecutionPreview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetExecutionPreview"},"GetInventory":{"name":"GetInventory","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view instance inventory details per the specified criteria","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetInventory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetInventory"},"GetInventorySchema":{"name":"GetInventorySchema","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view a list of inventory types or attribute names for a specified inventory item type","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetInventorySchema.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetInventorySchema"},"GetMaintenanceWindow":{"name":"GetMaintenanceWindow","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"}],"description":"Grants permission to view details about a specified maintenance window","accessLevel":"Read","resourceTypes":[{"name":"maintenancewindow","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindow.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetMaintenanceWindow"},"GetMaintenanceWindowExecution":{"name":"GetMaintenanceWindowExecution","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about a specified maintenance window execution","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindowExecution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetMaintenanceWindowExecution"},"GetMaintenanceWindowExecutionTask":{"name":"GetMaintenanceWindowExecutionTask","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about a specified maintenance window execution task","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindowExecutionTask.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetMaintenanceWindowExecutionTask"},"GetMaintenanceWindowExecutionTaskInvocation":{"name":"GetMaintenanceWindowExecutionTaskInvocation","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about a specific maintenance window task running on a specific target","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindowExecutionTaskInvocation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetMaintenanceWindowExecutionTaskInvocation"},"GetMaintenanceWindowTask":{"name":"GetMaintenanceWindowTask","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"}],"description":"Grants permission to view details about tasks registered with a specified maintenance window","accessLevel":"Read","resourceTypes":[{"name":"maintenancewindow","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindowTask.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetMaintenanceWindowTask"},"GetManifest":{"name":"GetManifest","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to Systems Manager and SSM Agent to determine package installation requirements for an instance (internal Systems Manager call)","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetManifest"},"GetOpsItem":{"name":"GetOpsItem","service":"ssm","conditionKeys":[],"resources":[{"name":"opsitem"}],"description":"Grants permission to view information about a specified OpsItem","accessLevel":"Read","resourceTypes":[{"name":"opsitem","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetOpsItem.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetOpsItem"},"GetOpsMetadata":{"name":"GetOpsMetadata","service":"ssm","conditionKeys":[],"resources":[{"name":"opsmetadata"}],"description":"Grants permission to retrieve an OpsMetadata object","accessLevel":"Read","resourceTypes":[{"name":"opsmetadata","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetOpsMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetOpsMetadata"},"GetOpsSummary":{"name":"GetOpsSummary","service":"ssm","conditionKeys":[],"resources":[{"name":"resourcedatasync"}],"description":"Grants permission to view summary information about OpsItems based on specified filters and aggregators","accessLevel":"Read","resourceTypes":[{"name":"resourcedatasync","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetOpsSummary.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetOpsSummary"},"GetParameter":{"name":"GetParameter","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"parameter"}],"description":"Grants permission to view information about a specified parameter","accessLevel":"Read","resourceTypes":[{"name":"parameter","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetParameter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetParameter"},"GetParameterHistory":{"name":"GetParameterHistory","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"parameter"}],"description":"Grants permission to view details and changes for a specified parameter","accessLevel":"Read","resourceTypes":[{"name":"parameter","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetParameterHistory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetParameterHistory"},"GetParameters":{"name":"GetParameters","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"parameter"}],"description":"Grants permission to view information about multiple specified parameters","accessLevel":"Read","resourceTypes":[{"name":"parameter","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetParameters.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetParameters"},"GetParametersByPath":{"name":"GetParametersByPath","service":"ssm","conditionKeys":["ssm:Recursive"],"resources":[{"name":"parameter"}],"description":"Grants permission to view information about parameters in a specified hierarchy","accessLevel":"Read","resourceTypes":[{"name":"parameter","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetParametersByPath.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetParametersByPath"},"GetPatchBaseline":{"name":"GetPatchBaseline","service":"ssm","conditionKeys":[],"resources":[{"name":"patchbaseline"}],"description":"Grants permission to view information about a specified patch baseline","accessLevel":"Read","resourceTypes":[{"name":"patchbaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetPatchBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetPatchBaseline"},"GetPatchBaselineForPatchGroup":{"name":"GetPatchBaselineForPatchGroup","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view the ID of the current patch baseline for a specified patch group","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetPatchBaselineForPatchGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetPatchBaselineForPatchGroup"},"GetResourcePolicies":{"name":"GetResourcePolicies","service":"ssm","conditionKeys":[],"resources":[{"name":"document"},{"name":"opsitemgroup"},{"name":"parameter"}],"description":"Grants permission to retrieve lists of Systems Manager resource policies","accessLevel":"List","resourceTypes":[{"name":"document","required":false},{"name":"opsitemgroup","required":false},{"name":"parameter","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetResourcePolicies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetResourcePolicies"},"GetServiceSetting":{"name":"GetServiceSetting","service":"ssm","conditionKeys":[],"resources":[{"name":"servicesetting"}],"description":"Grants permission to view the account-level setting for an AWS service","accessLevel":"Read","resourceTypes":[{"name":"servicesetting","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetServiceSetting.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetServiceSetting"},"LabelParameterVersion":{"name":"LabelParameterVersion","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"parameter"}],"description":"Grants permission to apply an identifying label to a specified version of a parameter","accessLevel":"Write","resourceTypes":[{"name":"parameter","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_LabelParameterVersion.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-LabelParameterVersion"},"ListAssociationVersions":{"name":"ListAssociationVersions","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"}],"description":"Grants permission to list versions of the specified association","accessLevel":"List","resourceTypes":[{"name":"association","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListAssociationVersions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListAssociationVersions"},"ListAssociations":{"name":"ListAssociations","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to list the associations for a specified SSM document or managed instance","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListAssociations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListAssociations"},"ListCommandInvocations":{"name":"ListCommandInvocations","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to list information about command invocations sent to a specified instance","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListCommandInvocations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListCommandInvocations"},"ListCommands":{"name":"ListCommands","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to list the commands sent to a specified instance","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListCommands.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListCommands"},"ListComplianceItems":{"name":"ListComplianceItems","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to list compliance status for specified resource types on a specified resource","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListComplianceItems.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListComplianceItems"},"ListComplianceSummaries":{"name":"ListComplianceSummaries","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to list a summary count of compliant and noncompliant resources for a specified compliance type","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListComplianceSummaries.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListComplianceSummaries"},"ListDocumentMetadataHistory":{"name":"ListDocumentMetadataHistory","service":"ssm","conditionKeys":["ssm:DocumentType"],"resources":[{"name":"document"}],"description":"Grants permission to view metadata history about a specified SSM document","accessLevel":"List","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListDocumentMetadataHistory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListDocumentMetadataHistory"},"ListDocumentVersions":{"name":"ListDocumentVersions","service":"ssm","conditionKeys":["ssm:DocumentType"],"resources":[{"name":"document"}],"description":"Grants permission to list all versions of a specified document","accessLevel":"List","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListDocumentVersions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListDocumentVersions"},"ListDocuments":{"name":"ListDocuments","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view information about a specified SSM document","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListDocuments.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListDocuments"},"ListInstanceAssociations":{"name":"ListInstanceAssociations","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to SSM Agent to check for new State Manager associations (internal Systems Manager call)","accessLevel":"List","resourceTypes":[{"name":"instance","required":false},{"name":"managed-instance","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListInstanceAssociations"},"ListInventoryEntries":{"name":"ListInventoryEntries","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view a list of specified inventory types for a specified instance","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListInventoryEntries.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListInventoryEntries"},"ListNodes":{"name":"ListNodes","service":"ssm","conditionKeys":[],"resources":[{"name":"resourcedatasync"}],"description":"Grants permission to view details about managed nodes based on specified filters","accessLevel":"List","resourceTypes":[{"name":"resourcedatasync","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListNodes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListNodes"},"ListNodesSummary":{"name":"ListNodesSummary","service":"ssm","conditionKeys":[],"resources":[{"name":"resourcedatasync"}],"description":"Grants permission to view summary information about managed nodes based on specified filters and aggregators","accessLevel":"List","resourceTypes":[{"name":"resourcedatasync","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListNodesSummary.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListNodesSummary"},"ListOpsItemEvents":{"name":"ListOpsItemEvents","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about OpsItemEvents","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListOpsItemEvents.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListOpsItemEvents"},"ListOpsItemRelatedItems":{"name":"ListOpsItemRelatedItems","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about OpsItem RelatedItems","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListOpsItemRelatedItems.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListOpsItemRelatedItems"},"ListOpsMetadata":{"name":"ListOpsMetadata","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view a list of OpsMetadata objects","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListOpsMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListOpsMetadata"},"ListResourceComplianceSummaries":{"name":"ListResourceComplianceSummaries","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to list resource-level summary count","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListResourceComplianceSummaries.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListResourceComplianceSummaries"},"ListResourceDataSync":{"name":"ListResourceDataSync","service":"ssm","conditionKeys":["ssm:SyncType"],"resources":[],"description":"Grants permission to list information about resource data sync configurations in an account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListResourceDataSync.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListResourceDataSync"},"ListTagsForResource":{"name":"ListTagsForResource","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"},{"name":"automation-execution"},{"name":"document"},{"name":"maintenancewindow"},{"name":"managed-instance"},{"name":"opsitem"},{"name":"opsmetadata"},{"name":"parameter"},{"name":"patchbaseline"}],"description":"Grants permission to view a list of resource tags for a specified resource","accessLevel":"List","resourceTypes":[{"name":"association","required":false},{"name":"automation-execution","required":false},{"name":"document","required":false},{"name":"maintenancewindow","required":false},{"name":"managed-instance","required":false},{"name":"opsitem","required":false},{"name":"opsmetadata","required":false},{"name":"parameter","required":false},{"name":"patchbaseline","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListTagsForResource"},"ModifyDocumentPermission":{"name":"ModifyDocumentPermission","service":"ssm","conditionKeys":["ssm:DocumentType"],"resources":[{"name":"document"}],"description":"Grants permission to share a custom SSM document publicly or privately with specified AWS accounts","accessLevel":"Permissions management","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ModifyDocumentPermission.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ModifyDocumentPermission"},"PutCalendar":{"name":"PutCalendar","service":"ssm","conditionKeys":[],"resources":[{"name":"document"}],"description":"Grants permission to create/edit a specific calendar","accessLevel":"Write","resourceTypes":[{"name":"document","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-change-calendar-prereqs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-PutCalendar"},"PutComplianceItems":{"name":"PutComplianceItems","service":"ssm","conditionKeys":["ec2:SourceInstanceARN","ssm:SourceInstanceARN"],"resources":[{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to register a compliance type and other compliance details on a specified resource","accessLevel":"Write","resourceTypes":[{"name":"instance","required":false},{"name":"managed-instance","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutComplianceItems.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-PutComplianceItems"},"PutConfigurePackageResult":{"name":"PutConfigurePackageResult","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to SSM Agent to generate a report of the results of specific agent requests (internal Systems Manager call)","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-PutConfigurePackageResult"},"PutInventory":{"name":"PutInventory","service":"ssm","conditionKeys":["ssm:InventoryTypeName"],"resources":[],"description":"Grants permission to add or update inventory items on multiple specified managed instances","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutInventory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-PutInventory"},"PutParameter":{"name":"PutParameter","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","ssm:Overwrite","ssm:Policies"],"resources":[{"name":"parameter"}],"description":"Grants permission to create an SSM parameter","accessLevel":"Write","resourceTypes":[{"name":"parameter","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutParameter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-PutParameter"},"PutResourcePolicy":{"name":"PutResourcePolicy","service":"ssm","conditionKeys":[],"resources":[{"name":"document"},{"name":"opsitemgroup"},{"name":"parameter"}],"description":"Grants permission to create or update a Systems Manager resource policy","accessLevel":"Permissions management","resourceTypes":[{"name":"document","required":false},{"name":"opsitemgroup","required":false},{"name":"parameter","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-PutResourcePolicy"},"RegisterDefaultPatchBaseline":{"name":"RegisterDefaultPatchBaseline","service":"ssm","conditionKeys":[],"resources":[{"name":"patchbaseline"}],"description":"Grants permission to specify the default patch baseline for an operating system type","accessLevel":"Write","resourceTypes":[{"name":"patchbaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterDefaultPatchBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-RegisterDefaultPatchBaseline"},"RegisterManagedInstance":{"name":"RegisterManagedInstance","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to register a Systems Manager Agent","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-RegisterManagedInstance"},"RegisterPatchBaselineForPatchGroup":{"name":"RegisterPatchBaselineForPatchGroup","service":"ssm","conditionKeys":[],"resources":[{"name":"patchbaseline"}],"description":"Grants permission to specify the default patch baseline for a specified patch group","accessLevel":"Write","resourceTypes":[{"name":"patchbaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterPatchBaselineForPatchGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-RegisterPatchBaselineForPatchGroup"},"RegisterTargetWithMaintenanceWindow":{"name":"RegisterTargetWithMaintenanceWindow","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"}],"description":"Grants permission to register a target with a specified maintenance window","accessLevel":"Write","resourceTypes":[{"name":"maintenancewindow","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterTargetWithMaintenanceWindow.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-RegisterTargetWithMaintenanceWindow"},"RegisterTaskWithMaintenanceWindow":{"name":"RegisterTaskWithMaintenanceWindow","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"}],"description":"Grants permission to register a task with a specified maintenance window","accessLevel":"Write","resourceTypes":[{"name":"maintenancewindow","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterTaskWithMaintenanceWindow.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-RegisterTaskWithMaintenanceWindow"},"RemoveTagsFromResource":{"name":"RemoveTagsFromResource","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"association"},{"name":"automation-execution"},{"name":"document"},{"name":"instance"},{"name":"maintenancewindow"},{"name":"managed-instance"},{"name":"opsitem"},{"name":"opsmetadata"},{"name":"parameter"},{"name":"patchbaseline"},{"name":"task"}],"description":"Grants permission to remove a specified tag key from a specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"association","required":false},{"name":"automation-execution","required":false},{"name":"document","required":false},{"name":"instance","required":false},{"name":"maintenancewindow","required":false},{"name":"managed-instance","required":false},{"name":"opsitem","required":false},{"name":"opsmetadata","required":false},{"name":"parameter","required":false},{"name":"patchbaseline","required":false},{"name":"task","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RemoveTagsFromResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-RemoveTagsFromResource"},"ResetServiceSetting":{"name":"ResetServiceSetting","service":"ssm","conditionKeys":[],"resources":[{"name":"servicesetting"}],"description":"Grants permission to reset the service setting for an AWS account to the default value","accessLevel":"Write","resourceTypes":[{"name":"servicesetting","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ResetServiceSetting.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ResetServiceSetting"},"ResumeSession":{"name":"ResumeSession","service":"ssm","conditionKeys":["ssm:resourceTag/aws:ssmmessages:session-id","ssm:resourceTag/aws:ssmmessages:target-id"],"resources":[{"name":"session"}],"description":"Grants permission to reconnect a Session Manager session to a managed instance","accessLevel":"Write","resourceTypes":[{"name":"session","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ResumeSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ResumeSession"},"SendAutomationSignal":{"name":"SendAutomationSignal","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"automation-execution"}],"description":"Grants permission to send a signal to change the current behavior or status of a specified Automation execution","accessLevel":"Write","resourceTypes":[{"name":"automation-execution","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_SendAutomationSignal.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-SendAutomationSignal"},"SendCommand":{"name":"SendCommand","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/${TagKey}"],"resources":[{"name":"bucket"},{"name":"document"},{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to run commands on one or more specified managed instances","accessLevel":"Write","resourceTypes":[{"name":"document","required":true},{"name":"bucket","required":false},{"name":"instance","required":false},{"name":"managed-instance","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_SendCommand.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-SendCommand"},"StartAccessRequest":{"name":"StartAccessRequest","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to start the workflow for just-in-time node access sessions","accessLevel":"Write","resourceTypes":[{"name":"instance","required":false},{"name":"managed-instance","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartAccessRequest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-StartAccessRequest"},"StartAssociationsOnce":{"name":"StartAssociationsOnce","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"}],"description":"Grants permission to run a specified association manually","accessLevel":"Write","resourceTypes":[{"name":"association","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartAssociationsOnce.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-StartAssociationsOnce"},"StartAutomationExecution":{"name":"StartAutomationExecution","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","ssm:DocumentVersion"],"resources":[{"name":"automation-definition"},{"name":"automation-execution"},{"name":"document"}],"description":"Grants permission to initiate the execution of an Automation document","accessLevel":"Write","resourceTypes":[{"name":"automation-execution","required":true},{"name":"document","required":true},{"name":"automation-definition","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartAutomationExecution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-StartAutomationExecution"},"StartChangeRequestExecution":{"name":"StartChangeRequestExecution","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","ssm:AutoApprove","ssm:DocumentVersion"],"resources":[{"name":"automation-definition"},{"name":"automation-execution"},{"name":"document"}],"description":"Grants permission to initiate the execution of an Automation Change Template document","accessLevel":"Write","resourceTypes":[{"name":"automation-execution","required":true},{"name":"document","required":true},{"name":"automation-definition","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartChangeRequestExecution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-StartChangeRequestExecution"},"StartExecutionPreview":{"name":"StartExecutionPreview","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to create a preview showing the effects that running a specified Automation runbook would have on the targeted resources","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartExecutionPreview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-StartExecutionPreview"},"StartSession":{"name":"StartSession","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}","ssm:AccessRequestId","ssm:SessionDocumentAccessCheck","ssm:resourceTag/${TagKey}"],"resources":[{"name":"document"},{"name":"instance"},{"name":"managed-instance"},{"name":"task"}],"description":"Grants permission to initiate a connection to a specified target for a Session Manager session","accessLevel":"Write","resourceTypes":[{"name":"document","required":false},{"name":"instance","required":false},{"name":"managed-instance","required":false},{"name":"task","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-StartSession"},"StopAutomationExecution":{"name":"StopAutomationExecution","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"automation-execution"}],"description":"Grants permission to stop a specified Automation execution that is already in progress","accessLevel":"Write","resourceTypes":[{"name":"automation-execution","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StopAutomationExecution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-StopAutomationExecution"},"TerminateSession":{"name":"TerminateSession","service":"ssm","conditionKeys":["ssm:resourceTag/aws:ssmmessages:session-id","ssm:resourceTag/aws:ssmmessages:target-id"],"resources":[{"name":"session"}],"description":"Grants permission to permanently end a Session Manager connection to an instance","accessLevel":"Write","resourceTypes":[{"name":"session","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_TerminateSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-TerminateSession"},"UnlabelParameterVersion":{"name":"UnlabelParameterVersion","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"parameter"}],"description":"Grants permission to remove an identifying label from a specified version of a parameter","accessLevel":"Write","resourceTypes":[{"name":"parameter","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UnlabelParameterVersion.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UnlabelParameterVersion"},"UpdateAssociation":{"name":"UpdateAssociation","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"},{"name":"document"},{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to update an association and immediately run the association on the specified targets","accessLevel":"Write","resourceTypes":[{"name":"association","required":true},{"name":"document","required":false},{"name":"instance","required":false},{"name":"managed-instance","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateAssociation"},"UpdateAssociationStatus":{"name":"UpdateAssociationStatus","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}","ec2:SourceInstanceARN","ssm:SourceInstanceARN"],"resources":[{"name":"document"},{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to update the status of the SSM document associated with a specified instance","accessLevel":"Write","resourceTypes":[{"name":"document","required":true},{"name":"instance","required":false},{"name":"managed-instance","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateAssociationStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateAssociationStatus"},"UpdateDocument":{"name":"UpdateDocument","service":"ssm","conditionKeys":["ssm:DocumentType"],"resources":[{"name":"document"}],"description":"Grants permission to update one or more values for an SSM document","accessLevel":"Write","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateDocument.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateDocument"},"UpdateDocumentDefaultVersion":{"name":"UpdateDocumentDefaultVersion","service":"ssm","conditionKeys":["ssm:DocumentType"],"resources":[{"name":"document"}],"description":"Grants permission to change the default version of an SSM document","accessLevel":"Write","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateDocumentDefaultVersion.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateDocumentDefaultVersion"},"UpdateDocumentMetadata":{"name":"UpdateDocumentMetadata","service":"ssm","conditionKeys":["ssm:DocumentType"],"resources":[{"name":"document"}],"description":"Grants permission to update the metadata of an SSM document","accessLevel":"Write","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateDocumentMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateDocumentMetadata"},"UpdateInstanceAssociationStatus":{"name":"UpdateInstanceAssociationStatus","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}","ec2:SourceInstanceARN","ssm:SourceInstanceARN"],"resources":[{"name":"association"},{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to SSM Agent to update the status of the association that it is currently running (internal Systems Manager call)","accessLevel":"Write","resourceTypes":[{"name":"association","required":true},{"name":"instance","required":false},{"name":"managed-instance","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateInstanceAssociationStatus"},"UpdateInstanceInformation":{"name":"UpdateInstanceInformation","service":"ssm","conditionKeys":["ec2:SourceInstanceARN","ssm:SourceInstanceARN"],"resources":[{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to SSM Agent to send a heartbeat signal to the Systems Manager service in the cloud","accessLevel":"Write","resourceTypes":[{"name":"instance","required":false},{"name":"managed-instance","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateInstanceInformation"},"UpdateMaintenanceWindow":{"name":"UpdateMaintenanceWindow","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"}],"description":"Grants permission to update a specified maintenance window","accessLevel":"Write","resourceTypes":[{"name":"maintenancewindow","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateMaintenanceWindow.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateMaintenanceWindow"},"UpdateMaintenanceWindowTarget":{"name":"UpdateMaintenanceWindowTarget","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"},{"name":"windowtarget"}],"description":"Grants permission to update a specified maintenance window target","accessLevel":"Write","resourceTypes":[{"name":"maintenancewindow","required":true},{"name":"windowtarget","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateMaintenanceWindowTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateMaintenanceWindowTarget"},"UpdateMaintenanceWindowTask":{"name":"UpdateMaintenanceWindowTask","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"},{"name":"windowtask"}],"description":"Grants permission to update a specified maintenance window task","accessLevel":"Write","resourceTypes":[{"name":"maintenancewindow","required":true},{"name":"windowtask","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateMaintenanceWindowTask.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateMaintenanceWindowTask"},"UpdateManagedInstanceRole":{"name":"UpdateManagedInstanceRole","service":"ssm","conditionKeys":["ssm:resourceTag/tag-key"],"resources":[{"name":"iam-role"},{"name":"managed-instance"}],"description":"Grants permission to assign or change the IAM role assigned to a specified managed instance","accessLevel":"Write","resourceTypes":[{"name":"iam-role","required":true},{"name":"managed-instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateManagedInstanceRole.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateManagedInstanceRole"},"UpdateOpsItem":{"name":"UpdateOpsItem","service":"ssm","conditionKeys":[],"resources":[{"name":"opsitem"}],"description":"Grants permission to edit or change an OpsItem","accessLevel":"Write","resourceTypes":[{"name":"opsitem","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateOpsItem.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateOpsItem"},"UpdateOpsMetadata":{"name":"UpdateOpsMetadata","service":"ssm","conditionKeys":[],"resources":[{"name":"opsmetadata"}],"description":"Grants permission to update an OpsMetadata object","accessLevel":"Write","resourceTypes":[{"name":"opsmetadata","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateOpsMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateOpsMetadata"},"UpdatePatchBaseline":{"name":"UpdatePatchBaseline","service":"ssm","conditionKeys":[],"resources":[{"name":"patchbaseline"}],"description":"Grants permission to update a specified patch baseline","accessLevel":"Write","resourceTypes":[{"name":"patchbaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdatePatchBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdatePatchBaseline"},"UpdateResourceDataSync":{"name":"UpdateResourceDataSync","service":"ssm","conditionKeys":["ssm:SyncType"],"resources":[{"name":"resourcedatasync"}],"description":"Grants permission to update a resource data sync","accessLevel":"Write","resourceTypes":[{"name":"resourcedatasync","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateResourceDataSync.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateResourceDataSync"},"UpdateServiceSetting":{"name":"UpdateServiceSetting","service":"ssm","conditionKeys":[],"resources":[{"name":"servicesetting"}],"description":"Grants permission to update the service setting for an AWS account","accessLevel":"Write","resourceTypes":[{"name":"servicesetting","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateServiceSetting.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateServiceSetting"}},"resources":[{"name":"association","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:association/${AssociationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"automation-definition","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:automation-definition/${AutomationDefinitionName}:${VersionId}"],"conditionKeys":["ssm:DocumentType"]},{"name":"automation-execution","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:automation-execution/${AutomationExecutionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/tag-key"]},{"name":"bucket","arnFormats":["arn:${Partition}:s3:::${BucketName}"],"conditionKeys":[]},{"name":"document","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:document/${DocumentName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ssm:DocumentCategories","ssm:DocumentType","ssm:resourceTag/${TagKey}"]},{"name":"iam-role","arnFormats":["arn:${Partition}:iam::${Account}:role/${RoleName}"],"conditionKeys":[]},{"name":"instance","arnFormats":["arn:${Partition}:ec2:${Region}:${Account}:instance/${InstanceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/${TagKey}"]},{"name":"maintenancewindow","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:maintenancewindow/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/tag-key"]},{"name":"managed-instance","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:managed-instance/${InstanceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/tag-key"]},{"name":"managed-instance-inventory","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:managed-instance-inventory/${InstanceId}"],"conditionKeys":[]},{"name":"opsitem","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:opsitem/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"opsitemgroup","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:opsitemgroup/default"],"conditionKeys":[]},{"name":"opsmetadata","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:opsmetadata/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/${TagKey}"]},{"name":"parameter","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:parameter/${ParameterNameWithoutLeadingSlash}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/tag-key"]},{"name":"patchbaseline","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:patchbaseline/${PatchBaselineIdResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/tag-key"]},{"name":"resourcedatasync","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:resource-data-sync/${SyncName}"],"conditionKeys":[]},{"name":"servicesetting","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:servicesetting/${ResourceId}"],"conditionKeys":[]},{"name":"session","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:session/${SessionId}"],"conditionKeys":["ssm:resourceTag/aws:ssmmessages:session-id","ssm:resourceTag/aws:ssmmessages:target-id"]},{"name":"task","arnFormats":["arn:${Partition}:ecs:${Region}:${Account}:task/${TaskId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"windowtarget","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:windowtarget/${WindowTargetId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/tag-key"]},{"name":"windowtask","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:windowtask/${WindowTaskId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/tag-key"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by 'Create' requests based on the allowed set of values for a specified tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by based on a tag key-value pair assigned to the AWS resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by 'Create' requests based on whether mandatory tags are included in the request"},"ec2:SourceInstanceARN":{"types":["ARN"],"description":"Filters access by the ARN of the instance from which the request originated"},"ssm:AccessRequestId":{"types":["String"],"description":"Filters access by verifying that a user has access to the access request ID specified in the request"},"ssm:AutoApprove":{"types":["Bool"],"description":"Filters access by verifying that a user has permission to start Change Manager workflows without a review step (with the exception of change freeze events)"},"ssm:DocumentCategories":{"types":["ArrayOfString"],"description":"Filters access by verifying that a user has permission to access a document belonging to a specific category enum"},"ssm:DocumentType":{"types":["String"],"description":"Filters access by verifying that a user has permission to access a document belonging to a specific document type. Only available in \"aws\", \"aws-cn\", and \"aws-us-gov\" partitions"},"ssm:DocumentVersion":{"types":["ArrayOfString"],"description":"Filters access by verifying that a user has permission to access a specific version of a document"},"ssm:InventoryTypeName":{"types":["ArrayOfString"],"description":"Filters access by verifying that a user also has access to the InventoryType specified in the request"},"ssm:Overwrite":{"types":["String"],"description":"Filters access by controling whether Systems Manager parameters can be overwritten"},"ssm:Policies":{"types":["String"],"description":"Filters access by controlling whether an IAM Entity (user or role) can create or update a parameter that includes a parameter policy"},"ssm:Recursive":{"types":["String"],"description":"Filters access by Systems Manager parameters created in a hierarchical structure"},"ssm:SessionDocumentAccessCheck":{"types":["Bool"],"description":"Filters access by verifying that a user has permission to access either the default Session Manager configuration document or the custom configuration document specified in a request"},"ssm:SourceInstanceARN":{"types":["ARN"],"description":"Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made. This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile"},"ssm:SyncType":{"types":["String"],"description":"Filters access by verifying that a user also has access to the ResourceDataSync SyncType specified in the request"},"ssm:resourceTag/${TagKey}":{"types":["String"],"description":"Filters access by a tag key-value pair assigned to the Systems Manager resource"},"ssm:resourceTag/aws:ssmmessages:session-id":{"types":["String"],"description":"Filters access by based on a tag key-value pair assigned to the Systems Manager session resource"},"ssm:resourceTag/aws:ssmmessages:target-id":{"types":["String"],"description":"Filters access by based on a tag key-value pair assigned to the Systems Manager session resource"},"ssm:resourceTag/tag-key":{"types":["String"],"description":"Filters access by based on a tag key-value pair assigned to the Systems Manager resource"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html"}
1	+ {"name":"ssm","actions":{"AddTagsToResource":{"name":"AddTagsToResource","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"association"},{"name":"automation-execution"},{"name":"document"},{"name":"instance"},{"name":"maintenancewindow"},{"name":"managed-instance"},{"name":"opsitem"},{"name":"opsmetadata"},{"name":"parameter"},{"name":"patchbaseline"},{"name":"task"}],"description":"Grants permission to add or overwrite one or more tags for a specified AWS resource","accessLevel":"Tagging","resourceTypes":[{"name":"association","required":false},{"name":"automation-execution","required":false},{"name":"document","required":false},{"name":"instance","required":false},{"name":"maintenancewindow","required":false},{"name":"managed-instance","required":false},{"name":"opsitem","required":false},{"name":"opsmetadata","required":false},{"name":"parameter","required":false},{"name":"patchbaseline","required":false},{"name":"task","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_AddTagsToResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-AddTagsToResource"},"AssociateOpsItemRelatedItem":{"name":"AssociateOpsItemRelatedItem","service":"ssm","conditionKeys":[],"resources":[{"name":"opsitem"}],"description":"Grants permission to associate RelatedItem to an OpsItem","accessLevel":"Write","resourceTypes":[{"name":"opsitem","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_AssociateOpsItemRelatedItem.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-AssociateOpsItemRelatedItem"},"CancelCommand":{"name":"CancelCommand","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to cancel a specified Run Command command","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CancelCommand.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-CancelCommand"},"CancelMaintenanceWindowExecution":{"name":"CancelMaintenanceWindowExecution","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"}],"description":"Grants permission to cancel an in-progress maintenance window execution","accessLevel":"Write","resourceTypes":[{"name":"maintenancewindow","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CancelMaintenanceWindowExecution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-CancelMaintenanceWindowExecution"},"CreateActivation":{"name":"CreateActivation","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an activation that is used to register on-premises servers and virtual machines (VMs) with Systems Manager","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateActivation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-CreateActivation"},"CreateAssociation":{"name":"CreateAssociation","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"association"},{"name":"document"},{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to associate a specified Systems Manager document with specified instances or other targets","accessLevel":"Write","resourceTypes":[{"name":"association","required":true},{"name":"document","required":true},{"name":"instance","required":false},{"name":"managed-instance","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-CreateAssociation"},"CreateAssociationBatch":{"name":"CreateAssociationBatch","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"document"},{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to combine entries for multiple CreateAssociation operations in a single command","accessLevel":"Write","resourceTypes":[{"name":"document","required":true},{"name":"instance","required":false},{"name":"managed-instance","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateAssociationBatch.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-CreateAssociationBatch"},"CreateDocument":{"name":"CreateDocument","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","ssm:DocumentType"],"resources":[{"name":"document"}],"description":"Grants permission to create a Systems Manager SSM document","accessLevel":"Write","resourceTypes":[{"name":"document","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateDocument.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-CreateDocument"},"CreateMaintenanceWindow":{"name":"CreateMaintenanceWindow","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a maintenance window","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateMaintenanceWindow.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-CreateMaintenanceWindow"},"CreateOpsItem":{"name":"CreateOpsItem","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an OpsItem in OpsCenter","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateOpsItem.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-CreateOpsItem"},"CreateOpsMetadata":{"name":"CreateOpsMetadata","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an OpsMetadata object for an AWS resource","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateOpsMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-CreateOpsMetadata"},"CreatePatchBaseline":{"name":"CreatePatchBaseline","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a patch baseline","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreatePatchBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-CreatePatchBaseline"},"CreateResourceDataSync":{"name":"CreateResourceDataSync","service":"ssm","conditionKeys":["ssm:SyncType"],"resources":[{"name":"resourcedatasync"}],"description":"Grants permission to create a resource data sync configuration, which regularly collects inventory data from managed instances and updates the data in an Amazon S3 bucket","accessLevel":"Write","resourceTypes":[{"name":"resourcedatasync","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateResourceDataSync.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-CreateResourceDataSync"},"DeleteActivation":{"name":"DeleteActivation","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to delete a specified activation for managed instances","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteActivation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeleteActivation"},"DeleteAssociation":{"name":"DeleteAssociation","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"},{"name":"document"},{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to disassociate a specified SSM document from a specified instance","accessLevel":"Write","resourceTypes":[{"name":"association","required":false},{"name":"document","required":false},{"name":"instance","required":false},{"name":"managed-instance","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeleteAssociation"},"DeleteDocument":{"name":"DeleteDocument","service":"ssm","conditionKeys":["ssm:DocumentType"],"resources":[{"name":"document"}],"description":"Grants permission to delete a specified SSM document and its instance associations","accessLevel":"Write","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteDocument.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeleteDocument"},"DeleteInventory":{"name":"DeleteInventory","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to delete a specified custom inventory type, or the data associated with a custom inventory type","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteInventory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeleteInventory"},"DeleteMaintenanceWindow":{"name":"DeleteMaintenanceWindow","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"}],"description":"Grants permission to delete a specified maintenance window","accessLevel":"Write","resourceTypes":[{"name":"maintenancewindow","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteMaintenanceWindow.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeleteMaintenanceWindow"},"DeleteOpsItem":{"name":"DeleteOpsItem","service":"ssm","conditionKeys":[],"resources":[{"name":"opsitem"}],"description":"Grants permission to delete an OpsItem","accessLevel":"Write","resourceTypes":[{"name":"opsitem","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteOpsItem.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeleteOpsItem"},"DeleteOpsMetadata":{"name":"DeleteOpsMetadata","service":"ssm","conditionKeys":[],"resources":[{"name":"opsmetadata"}],"description":"Grants permission to delete an OpsMetadata object","accessLevel":"Write","resourceTypes":[{"name":"opsmetadata","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteOpsMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeleteOpsMetadata"},"DeleteParameter":{"name":"DeleteParameter","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"parameter"}],"description":"Grants permission to delete a specified SSM parameter","accessLevel":"Write","resourceTypes":[{"name":"parameter","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteParameter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeleteParameter"},"DeleteParameters":{"name":"DeleteParameters","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"parameter"}],"description":"Grants permission to delete multiple specified SSM parameters","accessLevel":"Write","resourceTypes":[{"name":"parameter","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteParameters.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeleteParameters"},"DeletePatchBaseline":{"name":"DeletePatchBaseline","service":"ssm","conditionKeys":[],"resources":[{"name":"patchbaseline"}],"description":"Grants permission to delete a specified patch baseline","accessLevel":"Write","resourceTypes":[{"name":"patchbaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeletePatchBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeletePatchBaseline"},"DeleteResourceDataSync":{"name":"DeleteResourceDataSync","service":"ssm","conditionKeys":["ssm:SyncType"],"resources":[{"name":"resourcedatasync"}],"description":"Grants permission to delete a specified resource data sync","accessLevel":"Write","resourceTypes":[{"name":"resourcedatasync","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteResourceDataSync.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeleteResourceDataSync"},"DeleteResourcePolicy":{"name":"DeleteResourcePolicy","service":"ssm","conditionKeys":[],"resources":[{"name":"document"},{"name":"opsitemgroup"},{"name":"parameter"}],"description":"Grants permission to delete a Systems Manager resource policy","accessLevel":"Permissions management","resourceTypes":[{"name":"document","required":false},{"name":"opsitemgroup","required":false},{"name":"parameter","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeleteResourcePolicy"},"DeregisterManagedInstance":{"name":"DeregisterManagedInstance","service":"ssm","conditionKeys":["ssm:resourceTag/tag-key"],"resources":[{"name":"managed-instance"}],"description":"Grants permission to deregister a specified on-premises server or virtual machine (VM) from Systems Manager","accessLevel":"Write","resourceTypes":[{"name":"managed-instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeregisterManagedInstance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeregisterManagedInstance"},"DeregisterPatchBaselineForPatchGroup":{"name":"DeregisterPatchBaselineForPatchGroup","service":"ssm","conditionKeys":[],"resources":[{"name":"patchbaseline"}],"description":"Grants permission to deregister a specified patch baseline from being the default patch baseline for a specified patch group","accessLevel":"Write","resourceTypes":[{"name":"patchbaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeregisterPatchBaselineForPatchGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeregisterPatchBaselineForPatchGroup"},"DeregisterTargetFromMaintenanceWindow":{"name":"DeregisterTargetFromMaintenanceWindow","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"},{"name":"windowtarget"}],"description":"Grants permission to deregister a specified target from a maintenance window","accessLevel":"Write","resourceTypes":[{"name":"maintenancewindow","required":true},{"name":"windowtarget","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeregisterTargetFromMaintenanceWindow.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeregisterTargetFromMaintenanceWindow"},"DeregisterTaskFromMaintenanceWindow":{"name":"DeregisterTaskFromMaintenanceWindow","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"},{"name":"windowtask"}],"description":"Grants permission to deregister a specified task from a maintenance window","accessLevel":"Write","resourceTypes":[{"name":"maintenancewindow","required":true},{"name":"windowtask","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeregisterTaskFromMaintenanceWindow.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DeregisterTaskFromMaintenanceWindow"},"DescribeActivations":{"name":"DescribeActivations","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about a specified managed instance activation, such as when it was created and the number of instances registered using the activation","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeActivations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeActivations"},"DescribeAssociation":{"name":"DescribeAssociation","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"},{"name":"document"},{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to view details about the specified association for a specified instance or target","accessLevel":"Read","resourceTypes":[{"name":"association","required":false},{"name":"document","required":false},{"name":"instance","required":false},{"name":"managed-instance","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeAssociation"},"DescribeAssociationExecutionTargets":{"name":"DescribeAssociationExecutionTargets","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"}],"description":"Grants permission to view information about a specified association execution","accessLevel":"Read","resourceTypes":[{"name":"association","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAssociationExecutionTargets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeAssociationExecutionTargets"},"DescribeAssociationExecutions":{"name":"DescribeAssociationExecutions","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"}],"description":"Grants permission to view all executions for a specified association","accessLevel":"Read","resourceTypes":[{"name":"association","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAssociationExecutions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeAssociationExecutions"},"DescribeAutomationExecutions":{"name":"DescribeAutomationExecutions","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about all active and terminated Automation executions","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAutomationExecutions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeAutomationExecutions"},"DescribeAutomationStepExecutions":{"name":"DescribeAutomationStepExecutions","service":"ssm","conditionKeys":[],"resources":[{"name":"automation-execution"}],"description":"Grants permission to view information about all active and terminated step executions in an Automation workflow","accessLevel":"Read","resourceTypes":[{"name":"automation-execution","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAutomationStepExecutions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeAutomationStepExecutions"},"DescribeAvailablePatches":{"name":"DescribeAvailablePatches","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view all patches eligible to include in a patch baseline","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAvailablePatches.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeAvailablePatches"},"DescribeDocument":{"name":"DescribeDocument","service":"ssm","conditionKeys":["ssm:DocumentType"],"resources":[{"name":"document"}],"description":"Grants permission to view details about a specified SSM document","accessLevel":"Read","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeDocument.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeDocument"},"DescribeDocumentParameters":{"name":"DescribeDocumentParameters","service":"ssm","conditionKeys":[],"resources":[{"name":"document"}],"description":"Grants permission to display information about SSM document parameters in the Systems Manager console (internal Systems Manager action)","accessLevel":"Read","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeDocumentParameters"},"DescribeDocumentPermission":{"name":"DescribeDocumentPermission","service":"ssm","conditionKeys":["ssm:DocumentType"],"resources":[{"name":"document"}],"description":"Grants permission to view the permissions for a specified SSM document","accessLevel":"Read","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeDocumentPermission.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeDocumentPermission"},"DescribeEffectiveInstanceAssociations":{"name":"DescribeEffectiveInstanceAssociations","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to view all current associations for a specified instance","accessLevel":"Read","resourceTypes":[{"name":"instance","required":true},{"name":"managed-instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeEffectiveInstanceAssociations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeEffectiveInstanceAssociations"},"DescribeEffectivePatchesForPatchBaseline":{"name":"DescribeEffectivePatchesForPatchBaseline","service":"ssm","conditionKeys":[],"resources":[{"name":"patchbaseline"}],"description":"Grants permission to view details about the patches currently associated with the specified patch baseline (Windows only)","accessLevel":"Read","resourceTypes":[{"name":"patchbaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeEffectivePatchesForPatchBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeEffectivePatchesForPatchBaseline"},"DescribeInstanceAssociationsStatus":{"name":"DescribeInstanceAssociationsStatus","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to view the status of the associations for a specified instance","accessLevel":"Read","resourceTypes":[{"name":"instance","required":true},{"name":"managed-instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstanceAssociationsStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeInstanceAssociationsStatus"},"DescribeInstanceInformation":{"name":"DescribeInstanceInformation","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about a specified instance","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstanceInformation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeInstanceInformation"},"DescribeInstancePatchStates":{"name":"DescribeInstancePatchStates","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/${TagKey}"],"resources":[{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to view status details about patches on a specified instance","accessLevel":"Read","resourceTypes":[{"name":"instance","required":true},{"name":"managed-instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstancePatchStates.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeInstancePatchStates"},"DescribeInstancePatchStatesForPatchGroup":{"name":"DescribeInstancePatchStatesForPatchGroup","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to describe the high-level patch state for the instances in the specified patch group","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstancePatchStatesForPatchGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeInstancePatchStatesForPatchGroup"},"DescribeInstancePatches":{"name":"DescribeInstancePatches","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/${TagKey}"],"resources":[{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to view general details about the patches on a specified instance","accessLevel":"Read","resourceTypes":[{"name":"instance","required":true},{"name":"managed-instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstancePatches.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeInstancePatches"},"DescribeInstanceProperties":{"name":"DescribeInstanceProperties","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to user's Amazon EC2 console to render managed instances' nodes","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeInstanceProperties"},"DescribeInventoryDeletions":{"name":"DescribeInventoryDeletions","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about a specified inventory deletion","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInventoryDeletions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeInventoryDeletions"},"DescribeMaintenanceWindowExecutionTaskInvocations":{"name":"DescribeMaintenanceWindowExecutionTaskInvocations","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details of a specified task execution for a maintenance window","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowExecutionTaskInvocations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeMaintenanceWindowExecutionTaskInvocations"},"DescribeMaintenanceWindowExecutionTasks":{"name":"DescribeMaintenanceWindowExecutionTasks","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about the tasks that ran during a specified maintenance window execution","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowExecutionTasks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeMaintenanceWindowExecutionTasks"},"DescribeMaintenanceWindowExecutions":{"name":"DescribeMaintenanceWindowExecutions","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"}],"description":"Grants permission to view the executions of a specified maintenance window","accessLevel":"List","resourceTypes":[{"name":"maintenancewindow","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowExecutions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeMaintenanceWindowExecutions"},"DescribeMaintenanceWindowSchedule":{"name":"DescribeMaintenanceWindowSchedule","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about upcoming executions of a specified maintenance window","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowSchedule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeMaintenanceWindowSchedule"},"DescribeMaintenanceWindowTargets":{"name":"DescribeMaintenanceWindowTargets","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"}],"description":"Grants permission to view a list of the targets associated with a specified maintenance window","accessLevel":"List","resourceTypes":[{"name":"maintenancewindow","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowTargets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeMaintenanceWindowTargets"},"DescribeMaintenanceWindowTasks":{"name":"DescribeMaintenanceWindowTasks","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"}],"description":"Grants permission to view a list of the tasks associated with a specified maintenance window","accessLevel":"List","resourceTypes":[{"name":"maintenancewindow","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowTasks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeMaintenanceWindowTasks"},"DescribeMaintenanceWindows":{"name":"DescribeMaintenanceWindows","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view information about all or specified maintenance windows","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindows.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeMaintenanceWindows"},"DescribeMaintenanceWindowsForTarget":{"name":"DescribeMaintenanceWindowsForTarget","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view information about the maintenance window targets and tasks associated with a specified instance","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowsForTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeMaintenanceWindowsForTarget"},"DescribeOpsItems":{"name":"DescribeOpsItems","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about specified OpsItems","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeOpsItems.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeOpsItems"},"DescribeParameters":{"name":"DescribeParameters","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about a specified SSM parameter","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeParameters.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeParameters"},"DescribePatchBaselines":{"name":"DescribePatchBaselines","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view information about patch baselines that meet the specified criteria","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribePatchBaselines.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribePatchBaselines"},"DescribePatchGroupState":{"name":"DescribePatchGroupState","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view aggregated status details for patches for a specified patch group","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribePatchGroupState.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribePatchGroupState"},"DescribePatchGroups":{"name":"DescribePatchGroups","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view information about the patch baseline for a specified patch group","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribePatchGroups.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribePatchGroups"},"DescribePatchProperties":{"name":"DescribePatchProperties","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details of available patches for a specified operating system and patch property","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribePatchProperties.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribePatchProperties"},"DescribeSessions":{"name":"DescribeSessions","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view a list of recent Session Manager sessions that meet the specified search criteria","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DescribeSessions"},"DisassociateOpsItemRelatedItem":{"name":"DisassociateOpsItemRelatedItem","service":"ssm","conditionKeys":[],"resources":[{"name":"opsitem"}],"description":"Grants permission to disassociate RelatedItem from an OpsItem","accessLevel":"Write","resourceTypes":[{"name":"opsitem","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DisassociateOpsItemRelatedItem.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-DisassociateOpsItemRelatedItem"},"ExecuteAPI":{"name":"ExecuteAPI","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to a Systems Manager delegated administrator to view related resource details about OpsItems across multiple AWS accounts in the AWS Management Console","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html#systems-manager-namespace-other-API-operations","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ExecuteAPI"},"GetAccessToken":{"name":"GetAccessToken","service":"ssm","conditionKeys":[],"resources":[{"name":"opsitem"}],"description":"Grants permission to return a credentials set to be used with just-in-time node access","accessLevel":"Read","resourceTypes":[{"name":"opsitem","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetAccessToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetAccessToken"},"GetAutomationExecution":{"name":"GetAutomationExecution","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"automation-execution"}],"description":"Grants permission to view details of a specified Automation execution","accessLevel":"Read","resourceTypes":[{"name":"automation-execution","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_AutomationExecution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetAutomationExecution"},"GetCalendar":{"name":"GetCalendar","service":"ssm","conditionKeys":[],"resources":[{"name":"document"}],"description":"Grants permission to view details of a specific calendar","accessLevel":"Read","resourceTypes":[{"name":"document","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-change-calendar-prereqs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetCalendar"},"GetCalendarState":{"name":"GetCalendarState","service":"ssm","conditionKeys":[],"resources":[{"name":"document"}],"description":"Grants permission to view the calendar state for a change calendar or a list of change calendars","accessLevel":"Read","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetCalendarState.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetCalendarState"},"GetCommandInvocation":{"name":"GetCommandInvocation","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about the command execution of a specified invocation or plugin","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetCommandInvocation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetCommandInvocation"},"GetConnectionStatus":{"name":"GetConnectionStatus","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/${TagKey}"],"resources":[{"name":"instance"},{"name":"managed-instance"},{"name":"task"}],"description":"Grants permission to view the Session Manager connection status for a specified managed instance","accessLevel":"Read","resourceTypes":[{"name":"instance","required":false},{"name":"managed-instance","required":false},{"name":"task","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetConnectionStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetConnectionStatus"},"GetDefaultPatchBaseline":{"name":"GetDefaultPatchBaseline","service":"ssm","conditionKeys":[],"resources":[{"name":"patchbaseline"}],"description":"Grants permission to view the current default patch baseline for a specified operating system type","accessLevel":"Read","resourceTypes":[{"name":"patchbaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetDefaultPatchBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetDefaultPatchBaseline"},"GetDeployablePatchSnapshotForInstance":{"name":"GetDeployablePatchSnapshotForInstance","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve the current patch baseline snapshot for a specified instance","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetDeployablePatchSnapshotForInstance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetDeployablePatchSnapshotForInstance"},"GetDocument":{"name":"GetDocument","service":"ssm","conditionKeys":["ssm:DocumentCategories","ssm:DocumentType"],"resources":[{"name":"document"}],"description":"Grants permission to view the contents of a specified SSM document","accessLevel":"Read","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetDocument.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetDocument"},"GetExecutionPreview":{"name":"GetExecutionPreview","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to retrieve an existing preview that shows the effects that running a specified Automation runbook would have on the targeted resources","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetExecutionPreview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetExecutionPreview"},"GetInventory":{"name":"GetInventory","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view instance inventory details per the specified criteria","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetInventory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetInventory"},"GetInventorySchema":{"name":"GetInventorySchema","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view a list of inventory types or attribute names for a specified inventory item type","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetInventorySchema.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetInventorySchema"},"GetMaintenanceWindow":{"name":"GetMaintenanceWindow","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"}],"description":"Grants permission to view details about a specified maintenance window","accessLevel":"Read","resourceTypes":[{"name":"maintenancewindow","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindow.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetMaintenanceWindow"},"GetMaintenanceWindowExecution":{"name":"GetMaintenanceWindowExecution","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about a specified maintenance window execution","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindowExecution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetMaintenanceWindowExecution"},"GetMaintenanceWindowExecutionTask":{"name":"GetMaintenanceWindowExecutionTask","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about a specified maintenance window execution task","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindowExecutionTask.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetMaintenanceWindowExecutionTask"},"GetMaintenanceWindowExecutionTaskInvocation":{"name":"GetMaintenanceWindowExecutionTaskInvocation","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about a specific maintenance window task running on a specific target","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindowExecutionTaskInvocation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetMaintenanceWindowExecutionTaskInvocation"},"GetMaintenanceWindowTask":{"name":"GetMaintenanceWindowTask","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"}],"description":"Grants permission to view details about tasks registered with a specified maintenance window","accessLevel":"Read","resourceTypes":[{"name":"maintenancewindow","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindowTask.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetMaintenanceWindowTask"},"GetManifest":{"name":"GetManifest","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to Systems Manager and SSM Agent to determine package installation requirements for an instance (internal Systems Manager call)","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetManifest"},"GetOpsItem":{"name":"GetOpsItem","service":"ssm","conditionKeys":[],"resources":[{"name":"opsitem"}],"description":"Grants permission to view information about a specified OpsItem","accessLevel":"Read","resourceTypes":[{"name":"opsitem","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetOpsItem.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetOpsItem"},"GetOpsMetadata":{"name":"GetOpsMetadata","service":"ssm","conditionKeys":[],"resources":[{"name":"opsmetadata"}],"description":"Grants permission to retrieve an OpsMetadata object","accessLevel":"Read","resourceTypes":[{"name":"opsmetadata","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetOpsMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetOpsMetadata"},"GetOpsSummary":{"name":"GetOpsSummary","service":"ssm","conditionKeys":[],"resources":[{"name":"resourcedatasync"}],"description":"Grants permission to view summary information about OpsItems based on specified filters and aggregators","accessLevel":"Read","resourceTypes":[{"name":"resourcedatasync","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetOpsSummary.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetOpsSummary"},"GetParameter":{"name":"GetParameter","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"parameter"}],"description":"Grants permission to view information about a specified parameter","accessLevel":"Read","resourceTypes":[{"name":"parameter","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetParameter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetParameter"},"GetParameterHistory":{"name":"GetParameterHistory","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"parameter"}],"description":"Grants permission to view details and changes for a specified parameter","accessLevel":"Read","resourceTypes":[{"name":"parameter","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetParameterHistory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetParameterHistory"},"GetParameters":{"name":"GetParameters","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"parameter"}],"description":"Grants permission to view information about multiple specified parameters","accessLevel":"Read","resourceTypes":[{"name":"parameter","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetParameters.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetParameters"},"GetParametersByPath":{"name":"GetParametersByPath","service":"ssm","conditionKeys":["ssm:Recursive"],"resources":[{"name":"parameter"}],"description":"Grants permission to view information about parameters in a specified hierarchy","accessLevel":"Read","resourceTypes":[{"name":"parameter","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetParametersByPath.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetParametersByPath"},"GetPatchBaseline":{"name":"GetPatchBaseline","service":"ssm","conditionKeys":[],"resources":[{"name":"patchbaseline"}],"description":"Grants permission to view information about a specified patch baseline","accessLevel":"Read","resourceTypes":[{"name":"patchbaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetPatchBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetPatchBaseline"},"GetPatchBaselineForPatchGroup":{"name":"GetPatchBaselineForPatchGroup","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view the ID of the current patch baseline for a specified patch group","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetPatchBaselineForPatchGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetPatchBaselineForPatchGroup"},"GetResourcePolicies":{"name":"GetResourcePolicies","service":"ssm","conditionKeys":[],"resources":[{"name":"document"},{"name":"opsitemgroup"},{"name":"parameter"}],"description":"Grants permission to retrieve lists of Systems Manager resource policies","accessLevel":"List","resourceTypes":[{"name":"document","required":false},{"name":"opsitemgroup","required":false},{"name":"parameter","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetResourcePolicies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetResourcePolicies"},"GetServiceSetting":{"name":"GetServiceSetting","service":"ssm","conditionKeys":[],"resources":[{"name":"servicesetting"}],"description":"Grants permission to view the account-level setting for an AWS service","accessLevel":"Read","resourceTypes":[{"name":"servicesetting","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetServiceSetting.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-GetServiceSetting"},"LabelParameterVersion":{"name":"LabelParameterVersion","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"parameter"}],"description":"Grants permission to apply an identifying label to a specified version of a parameter","accessLevel":"Write","resourceTypes":[{"name":"parameter","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_LabelParameterVersion.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-LabelParameterVersion"},"ListAssociationVersions":{"name":"ListAssociationVersions","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"}],"description":"Grants permission to list versions of the specified association","accessLevel":"List","resourceTypes":[{"name":"association","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListAssociationVersions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListAssociationVersions"},"ListAssociations":{"name":"ListAssociations","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to list the associations for a specified SSM document or managed instance","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListAssociations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListAssociations"},"ListCommandInvocations":{"name":"ListCommandInvocations","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to list information about command invocations sent to a specified instance","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListCommandInvocations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListCommandInvocations"},"ListCommands":{"name":"ListCommands","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to list the commands sent to a specified instance","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListCommands.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListCommands"},"ListComplianceItems":{"name":"ListComplianceItems","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to list compliance status for specified resource types on a specified resource","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListComplianceItems.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListComplianceItems"},"ListComplianceSummaries":{"name":"ListComplianceSummaries","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to list a summary count of compliant and noncompliant resources for a specified compliance type","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListComplianceSummaries.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListComplianceSummaries"},"ListDocumentMetadataHistory":{"name":"ListDocumentMetadataHistory","service":"ssm","conditionKeys":["ssm:DocumentType"],"resources":[{"name":"document"}],"description":"Grants permission to view metadata history about a specified SSM document","accessLevel":"List","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListDocumentMetadataHistory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListDocumentMetadataHistory"},"ListDocumentVersions":{"name":"ListDocumentVersions","service":"ssm","conditionKeys":["ssm:DocumentType"],"resources":[{"name":"document"}],"description":"Grants permission to list all versions of a specified document","accessLevel":"List","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListDocumentVersions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListDocumentVersions"},"ListDocuments":{"name":"ListDocuments","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view information about a specified SSM document","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListDocuments.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListDocuments"},"ListInstanceAssociations":{"name":"ListInstanceAssociations","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to SSM Agent to check for new State Manager associations (internal Systems Manager call)","accessLevel":"List","resourceTypes":[{"name":"instance","required":false},{"name":"managed-instance","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListInstanceAssociations"},"ListInventoryEntries":{"name":"ListInventoryEntries","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view a list of specified inventory types for a specified instance","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListInventoryEntries.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListInventoryEntries"},"ListNodes":{"name":"ListNodes","service":"ssm","conditionKeys":[],"resources":[{"name":"resourcedatasync"}],"description":"Grants permission to view details about managed nodes based on specified filters","accessLevel":"List","resourceTypes":[{"name":"resourcedatasync","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListNodes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListNodes"},"ListNodesSummary":{"name":"ListNodesSummary","service":"ssm","conditionKeys":[],"resources":[{"name":"resourcedatasync"}],"description":"Grants permission to view summary information about managed nodes based on specified filters and aggregators","accessLevel":"List","resourceTypes":[{"name":"resourcedatasync","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListNodesSummary.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListNodesSummary"},"ListOpsItemEvents":{"name":"ListOpsItemEvents","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about OpsItemEvents","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListOpsItemEvents.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListOpsItemEvents"},"ListOpsItemRelatedItems":{"name":"ListOpsItemRelatedItems","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view details about OpsItem RelatedItems","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListOpsItemRelatedItems.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListOpsItemRelatedItems"},"ListOpsMetadata":{"name":"ListOpsMetadata","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to view a list of OpsMetadata objects","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListOpsMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListOpsMetadata"},"ListResourceComplianceSummaries":{"name":"ListResourceComplianceSummaries","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to list resource-level summary count","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListResourceComplianceSummaries.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListResourceComplianceSummaries"},"ListResourceDataSync":{"name":"ListResourceDataSync","service":"ssm","conditionKeys":["ssm:SyncType"],"resources":[],"description":"Grants permission to list information about resource data sync configurations in an account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListResourceDataSync.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListResourceDataSync"},"ListTagsForResource":{"name":"ListTagsForResource","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"},{"name":"automation-execution"},{"name":"document"},{"name":"maintenancewindow"},{"name":"managed-instance"},{"name":"opsitem"},{"name":"opsmetadata"},{"name":"parameter"},{"name":"patchbaseline"}],"description":"Grants permission to view a list of resource tags for a specified resource","accessLevel":"List","resourceTypes":[{"name":"association","required":false},{"name":"automation-execution","required":false},{"name":"document","required":false},{"name":"maintenancewindow","required":false},{"name":"managed-instance","required":false},{"name":"opsitem","required":false},{"name":"opsmetadata","required":false},{"name":"parameter","required":false},{"name":"patchbaseline","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ListTagsForResource"},"ModifyDocumentPermission":{"name":"ModifyDocumentPermission","service":"ssm","conditionKeys":["ssm:DocumentType"],"resources":[{"name":"document"}],"description":"Grants permission to share a custom SSM document publicly or privately with specified AWS accounts","accessLevel":"Permissions management","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ModifyDocumentPermission.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ModifyDocumentPermission"},"PutCalendar":{"name":"PutCalendar","service":"ssm","conditionKeys":[],"resources":[{"name":"document"}],"description":"Grants permission to create/edit a specific calendar","accessLevel":"Write","resourceTypes":[{"name":"document","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-change-calendar-prereqs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-PutCalendar"},"PutComplianceItems":{"name":"PutComplianceItems","service":"ssm","conditionKeys":["ec2:SourceInstanceARN","ssm:SourceInstanceARN"],"resources":[{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to register a compliance type and other compliance details on a specified resource","accessLevel":"Write","resourceTypes":[{"name":"instance","required":false},{"name":"managed-instance","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutComplianceItems.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-PutComplianceItems"},"PutConfigurePackageResult":{"name":"PutConfigurePackageResult","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to SSM Agent to generate a report of the results of specific agent requests (internal Systems Manager call)","accessLevel":"Read","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-PutConfigurePackageResult"},"PutInventory":{"name":"PutInventory","service":"ssm","conditionKeys":["ssm:InventoryTypeName"],"resources":[],"description":"Grants permission to add or update inventory items on multiple specified managed instances","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutInventory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-PutInventory"},"PutParameter":{"name":"PutParameter","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","ssm:Overwrite","ssm:Policies"],"resources":[{"name":"parameter"}],"description":"Grants permission to create an SSM parameter","accessLevel":"Write","resourceTypes":[{"name":"parameter","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutParameter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-PutParameter"},"PutResourcePolicy":{"name":"PutResourcePolicy","service":"ssm","conditionKeys":[],"resources":[{"name":"document"},{"name":"opsitemgroup"},{"name":"parameter"}],"description":"Grants permission to create or update a Systems Manager resource policy","accessLevel":"Permissions management","resourceTypes":[{"name":"document","required":false},{"name":"opsitemgroup","required":false},{"name":"parameter","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-PutResourcePolicy"},"RegisterDefaultPatchBaseline":{"name":"RegisterDefaultPatchBaseline","service":"ssm","conditionKeys":[],"resources":[{"name":"patchbaseline"}],"description":"Grants permission to specify the default patch baseline for an operating system type","accessLevel":"Write","resourceTypes":[{"name":"patchbaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterDefaultPatchBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-RegisterDefaultPatchBaseline"},"RegisterManagedInstance":{"name":"RegisterManagedInstance","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to register a Systems Manager Agent","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-RegisterManagedInstance"},"RegisterPatchBaselineForPatchGroup":{"name":"RegisterPatchBaselineForPatchGroup","service":"ssm","conditionKeys":[],"resources":[{"name":"patchbaseline"}],"description":"Grants permission to specify the default patch baseline for a specified patch group","accessLevel":"Write","resourceTypes":[{"name":"patchbaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterPatchBaselineForPatchGroup.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-RegisterPatchBaselineForPatchGroup"},"RegisterTargetWithMaintenanceWindow":{"name":"RegisterTargetWithMaintenanceWindow","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"}],"description":"Grants permission to register a target with a specified maintenance window","accessLevel":"Write","resourceTypes":[{"name":"maintenancewindow","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterTargetWithMaintenanceWindow.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-RegisterTargetWithMaintenanceWindow"},"RegisterTaskWithMaintenanceWindow":{"name":"RegisterTaskWithMaintenanceWindow","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"}],"description":"Grants permission to register a task with a specified maintenance window","accessLevel":"Write","resourceTypes":[{"name":"maintenancewindow","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterTaskWithMaintenanceWindow.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-RegisterTaskWithMaintenanceWindow"},"RemoveTagsFromResource":{"name":"RemoveTagsFromResource","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"association"},{"name":"automation-execution"},{"name":"document"},{"name":"instance"},{"name":"maintenancewindow"},{"name":"managed-instance"},{"name":"opsitem"},{"name":"opsmetadata"},{"name":"parameter"},{"name":"patchbaseline"},{"name":"task"}],"description":"Grants permission to remove a specified tag key from a specified resource","accessLevel":"Tagging","resourceTypes":[{"name":"association","required":false},{"name":"automation-execution","required":false},{"name":"document","required":false},{"name":"instance","required":false},{"name":"maintenancewindow","required":false},{"name":"managed-instance","required":false},{"name":"opsitem","required":false},{"name":"opsmetadata","required":false},{"name":"parameter","required":false},{"name":"patchbaseline","required":false},{"name":"task","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RemoveTagsFromResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-RemoveTagsFromResource"},"ResetServiceSetting":{"name":"ResetServiceSetting","service":"ssm","conditionKeys":[],"resources":[{"name":"servicesetting"}],"description":"Grants permission to reset the service setting for an AWS account to the default value","accessLevel":"Write","resourceTypes":[{"name":"servicesetting","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ResetServiceSetting.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ResetServiceSetting"},"ResumeSession":{"name":"ResumeSession","service":"ssm","conditionKeys":["ssm:resourceTag/aws:ssmmessages:session-id","ssm:resourceTag/aws:ssmmessages:target-id"],"resources":[{"name":"session"}],"description":"Grants permission to reconnect a Session Manager session to a managed instance","accessLevel":"Write","resourceTypes":[{"name":"session","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ResumeSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-ResumeSession"},"SendAutomationSignal":{"name":"SendAutomationSignal","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"automation-execution"}],"description":"Grants permission to send a signal to change the current behavior or status of a specified Automation execution","accessLevel":"Write","resourceTypes":[{"name":"automation-execution","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_SendAutomationSignal.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-SendAutomationSignal"},"SendCommand":{"name":"SendCommand","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/${TagKey}"],"resources":[{"name":"bucket"},{"name":"document"},{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to run commands on one or more specified managed instances","accessLevel":"Write","resourceTypes":[{"name":"document","required":true},{"name":"bucket","required":false},{"name":"instance","required":false},{"name":"managed-instance","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_SendCommand.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-SendCommand"},"StartAccessRequest":{"name":"StartAccessRequest","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to start the workflow for just-in-time node access sessions","accessLevel":"Write","resourceTypes":[{"name":"instance","required":false},{"name":"managed-instance","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartAccessRequest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-StartAccessRequest"},"StartAssociationsOnce":{"name":"StartAssociationsOnce","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"}],"description":"Grants permission to run a specified association manually","accessLevel":"Write","resourceTypes":[{"name":"association","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartAssociationsOnce.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-StartAssociationsOnce"},"StartAutomationExecution":{"name":"StartAutomationExecution","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","ssm:DocumentVersion"],"resources":[{"name":"automation-definition"},{"name":"automation-execution"},{"name":"document"}],"description":"Grants permission to initiate the execution of an Automation document","accessLevel":"Write","resourceTypes":[{"name":"automation-execution","required":true},{"name":"document","required":true},{"name":"automation-definition","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartAutomationExecution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-StartAutomationExecution"},"StartChangeRequestExecution":{"name":"StartChangeRequestExecution","service":"ssm","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys","ssm:AutoApprove","ssm:DocumentVersion"],"resources":[{"name":"automation-definition"},{"name":"automation-execution"},{"name":"document"}],"description":"Grants permission to initiate the execution of an Automation Change Template document","accessLevel":"Write","resourceTypes":[{"name":"automation-execution","required":true},{"name":"document","required":true},{"name":"automation-definition","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartChangeRequestExecution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-StartChangeRequestExecution"},"StartExecutionPreview":{"name":"StartExecutionPreview","service":"ssm","conditionKeys":[],"resources":[],"description":"Grants permission to create a preview showing the effects that running a specified Automation runbook would have on the targeted resources","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartExecutionPreview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-StartExecutionPreview"},"StartSession":{"name":"StartSession","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}","ssm:AccessRequestId","ssm:SessionDocumentAccessCheck","ssm:resourceTag/${TagKey}"],"resources":[{"name":"document"},{"name":"instance"},{"name":"managed-instance"},{"name":"task"}],"description":"Grants permission to initiate a connection to a specified target for a Session Manager session","accessLevel":"Write","resourceTypes":[{"name":"document","required":false},{"name":"instance","required":false},{"name":"managed-instance","required":false},{"name":"task","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-StartSession"},"StopAutomationExecution":{"name":"StopAutomationExecution","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"automation-execution"}],"description":"Grants permission to stop a specified Automation execution that is already in progress","accessLevel":"Write","resourceTypes":[{"name":"automation-execution","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StopAutomationExecution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-StopAutomationExecution"},"TerminateSession":{"name":"TerminateSession","service":"ssm","conditionKeys":["ssm:resourceTag/aws:ssmmessages:session-id","ssm:resourceTag/aws:ssmmessages:target-id"],"resources":[{"name":"session"}],"description":"Grants permission to permanently end a Session Manager connection to an instance","accessLevel":"Write","resourceTypes":[{"name":"session","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_TerminateSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-TerminateSession"},"UnlabelParameterVersion":{"name":"UnlabelParameterVersion","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"parameter"}],"description":"Grants permission to remove an identifying label from a specified version of a parameter","accessLevel":"Write","resourceTypes":[{"name":"parameter","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UnlabelParameterVersion.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UnlabelParameterVersion"},"UpdateAssociation":{"name":"UpdateAssociation","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}"],"resources":[{"name":"association"},{"name":"document"},{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to update an association and immediately run the association on the specified targets","accessLevel":"Write","resourceTypes":[{"name":"association","required":true},{"name":"document","required":false},{"name":"instance","required":false},{"name":"managed-instance","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateAssociation"},"UpdateAssociationStatus":{"name":"UpdateAssociationStatus","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}","ec2:SourceInstanceARN","ssm:SourceInstanceARN"],"resources":[{"name":"document"},{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to update the status of the SSM document associated with a specified instance","accessLevel":"Write","resourceTypes":[{"name":"document","required":true},{"name":"instance","required":false},{"name":"managed-instance","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateAssociationStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateAssociationStatus"},"UpdateDocument":{"name":"UpdateDocument","service":"ssm","conditionKeys":["ssm:DocumentType"],"resources":[{"name":"document"}],"description":"Grants permission to update one or more values for an SSM document","accessLevel":"Write","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateDocument.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateDocument"},"UpdateDocumentDefaultVersion":{"name":"UpdateDocumentDefaultVersion","service":"ssm","conditionKeys":["ssm:DocumentType"],"resources":[{"name":"document"}],"description":"Grants permission to change the default version of an SSM document","accessLevel":"Write","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateDocumentDefaultVersion.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateDocumentDefaultVersion"},"UpdateDocumentMetadata":{"name":"UpdateDocumentMetadata","service":"ssm","conditionKeys":["ssm:DocumentType"],"resources":[{"name":"document"}],"description":"Grants permission to update the metadata of an SSM document","accessLevel":"Write","resourceTypes":[{"name":"document","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateDocumentMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateDocumentMetadata"},"UpdateInstanceAssociationStatus":{"name":"UpdateInstanceAssociationStatus","service":"ssm","conditionKeys":["aws:ResourceTag/${TagKey}","ec2:SourceInstanceARN","ssm:SourceInstanceARN"],"resources":[{"name":"association"},{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to SSM Agent to update the status of the association that it is currently running (internal Systems Manager call)","accessLevel":"Write","resourceTypes":[{"name":"association","required":true},{"name":"instance","required":false},{"name":"managed-instance","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateInstanceAssociationStatus"},"UpdateInstanceInformation":{"name":"UpdateInstanceInformation","service":"ssm","conditionKeys":["ec2:SourceInstanceARN","ssm:SourceInstanceARN"],"resources":[{"name":"instance"},{"name":"managed-instance"}],"description":"Grants permission to SSM Agent to send a heartbeat signal to the Systems Manager service in the cloud","accessLevel":"Write","resourceTypes":[{"name":"instance","required":false},{"name":"managed-instance","required":false}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateInstanceInformation"},"UpdateMaintenanceWindow":{"name":"UpdateMaintenanceWindow","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"}],"description":"Grants permission to update a specified maintenance window","accessLevel":"Write","resourceTypes":[{"name":"maintenancewindow","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateMaintenanceWindow.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateMaintenanceWindow"},"UpdateMaintenanceWindowTarget":{"name":"UpdateMaintenanceWindowTarget","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"},{"name":"windowtarget"}],"description":"Grants permission to update a specified maintenance window target","accessLevel":"Write","resourceTypes":[{"name":"maintenancewindow","required":true},{"name":"windowtarget","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateMaintenanceWindowTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateMaintenanceWindowTarget"},"UpdateMaintenanceWindowTask":{"name":"UpdateMaintenanceWindowTask","service":"ssm","conditionKeys":[],"resources":[{"name":"maintenancewindow"},{"name":"windowtask"}],"description":"Grants permission to update a specified maintenance window task","accessLevel":"Write","resourceTypes":[{"name":"maintenancewindow","required":true},{"name":"windowtask","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateMaintenanceWindowTask.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateMaintenanceWindowTask"},"UpdateManagedInstanceRole":{"name":"UpdateManagedInstanceRole","service":"ssm","conditionKeys":["ssm:resourceTag/tag-key"],"resources":[{"name":"iam-role"},{"name":"managed-instance"}],"description":"Grants permission to assign or change the IAM role assigned to a specified managed instance","accessLevel":"Write","resourceTypes":[{"name":"iam-role","required":true},{"name":"managed-instance","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateManagedInstanceRole.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateManagedInstanceRole"},"UpdateOpsItem":{"name":"UpdateOpsItem","service":"ssm","conditionKeys":[],"resources":[{"name":"opsitem"}],"description":"Grants permission to edit or change an OpsItem","accessLevel":"Write","resourceTypes":[{"name":"opsitem","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateOpsItem.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateOpsItem"},"UpdateOpsMetadata":{"name":"UpdateOpsMetadata","service":"ssm","conditionKeys":[],"resources":[{"name":"opsmetadata"}],"description":"Grants permission to update an OpsMetadata object","accessLevel":"Write","resourceTypes":[{"name":"opsmetadata","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateOpsMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateOpsMetadata"},"UpdatePatchBaseline":{"name":"UpdatePatchBaseline","service":"ssm","conditionKeys":[],"resources":[{"name":"patchbaseline"}],"description":"Grants permission to update a specified patch baseline","accessLevel":"Write","resourceTypes":[{"name":"patchbaseline","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdatePatchBaseline.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdatePatchBaseline"},"UpdateResourceDataSync":{"name":"UpdateResourceDataSync","service":"ssm","conditionKeys":["ssm:SyncType"],"resources":[{"name":"resourcedatasync"}],"description":"Grants permission to update a resource data sync","accessLevel":"Write","resourceTypes":[{"name":"resourcedatasync","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateResourceDataSync.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateResourceDataSync"},"UpdateServiceSetting":{"name":"UpdateServiceSetting","service":"ssm","conditionKeys":[],"resources":[{"name":"servicesetting"}],"description":"Grants permission to update the service setting for an AWS account","accessLevel":"Write","resourceTypes":[{"name":"servicesetting","required":true}],"operationUrl":"https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateServiceSetting.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-UpdateServiceSetting"}},"resources":[{"service":"ssm","name":"association","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:association/${AssociationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"ssm","name":"automation-definition","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:automation-definition/${AutomationDefinitionName}:${VersionId}"],"conditionKeys":["ssm:DocumentType"]},{"service":"ssm","name":"automation-execution","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:automation-execution/${AutomationExecutionId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/tag-key"]},{"service":"ssm","name":"bucket","arnFormats":["arn:${Partition}:s3:::${BucketName}"],"conditionKeys":[]},{"service":"ssm","name":"document","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:document/${DocumentName}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ssm:DocumentCategories","ssm:DocumentType","ssm:resourceTag/${TagKey}"]},{"service":"ssm","name":"iam-role","arnFormats":["arn:${Partition}:iam::${Account}:role/${RoleName}"],"conditionKeys":[]},{"service":"ssm","name":"instance","arnFormats":["arn:${Partition}:ec2:${Region}:${Account}:instance/${InstanceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/${TagKey}"]},{"service":"ssm","name":"maintenancewindow","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:maintenancewindow/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/tag-key"]},{"service":"ssm","name":"managed-instance","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:managed-instance/${InstanceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/tag-key"]},{"service":"ssm","name":"managed-instance-inventory","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:managed-instance-inventory/${InstanceId}"],"conditionKeys":[]},{"service":"ssm","name":"opsitem","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:opsitem/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"ssm","name":"opsitemgroup","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:opsitemgroup/default"],"conditionKeys":[]},{"service":"ssm","name":"opsmetadata","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:opsmetadata/${ResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/${TagKey}"]},{"service":"ssm","name":"parameter","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:parameter/${ParameterNameWithoutLeadingSlash}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/tag-key"]},{"service":"ssm","name":"patchbaseline","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:patchbaseline/${PatchBaselineIdResourceId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/tag-key"]},{"service":"ssm","name":"resourcedatasync","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:resource-data-sync/${SyncName}"],"conditionKeys":[]},{"service":"ssm","name":"servicesetting","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:servicesetting/${ResourceId}"],"conditionKeys":[]},{"service":"ssm","name":"session","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:session/${SessionId}"],"conditionKeys":["ssm:resourceTag/aws:ssmmessages:session-id","ssm:resourceTag/aws:ssmmessages:target-id"]},{"service":"ssm","name":"task","arnFormats":["arn:${Partition}:ecs:${Region}:${Account}:task/${TaskId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"ssm","name":"windowtarget","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:windowtarget/${WindowTargetId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/tag-key"]},{"service":"ssm","name":"windowtask","arnFormats":["arn:${Partition}:ssm:${Region}:${Account}:windowtask/${WindowTaskId}"],"conditionKeys":["aws:ResourceTag/${TagKey}","ssm:resourceTag/tag-key"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"name":"aws:RequestTag/${TagKey}","types":["String"],"description":"Filters access by 'Create' requests based on the allowed set of values for a specified tags"},"aws:ResourceTag/${TagKey}":{"name":"aws:ResourceTag/${TagKey}","types":["String"],"description":"Filters access by based on a tag key-value pair assigned to the AWS resource"},"aws:TagKeys":{"name":"aws:TagKeys","types":["ArrayOfString"],"description":"Filters access by 'Create' requests based on whether mandatory tags are included in the request"},"ec2:SourceInstanceARN":{"name":"ec2:SourceInstanceARN","types":["ARN"],"description":"Filters access by the ARN of the instance from which the request originated"},"ssm:AccessRequestId":{"name":"ssm:AccessRequestId","types":["String"],"description":"Filters access by verifying that a user has access to the access request ID specified in the request"},"ssm:AutoApprove":{"name":"ssm:AutoApprove","types":["Bool"],"description":"Filters access by verifying that a user has permission to start Change Manager workflows without a review step (with the exception of change freeze events)"},"ssm:DocumentCategories":{"name":"ssm:DocumentCategories","types":["ArrayOfString"],"description":"Filters access by verifying that a user has permission to access a document belonging to a specific category enum"},"ssm:DocumentType":{"name":"ssm:DocumentType","types":["String"],"description":"Filters access by verifying that a user has permission to access a document belonging to a specific document type. Only available in \"aws\", \"aws-cn\", and \"aws-us-gov\" partitions"},"ssm:DocumentVersion":{"name":"ssm:DocumentVersion","types":["ArrayOfString"],"description":"Filters access by verifying that a user has permission to access a specific version of a document"},"ssm:InventoryTypeName":{"name":"ssm:InventoryTypeName","types":["ArrayOfString"],"description":"Filters access by verifying that a user also has access to the InventoryType specified in the request"},"ssm:Overwrite":{"name":"ssm:Overwrite","types":["String"],"description":"Filters access by controling whether Systems Manager parameters can be overwritten"},"ssm:Policies":{"name":"ssm:Policies","types":["String"],"description":"Filters access by controlling whether an IAM Entity (user or role) can create or update a parameter that includes a parameter policy"},"ssm:Recursive":{"name":"ssm:Recursive","types":["String"],"description":"Filters access by Systems Manager parameters created in a hierarchical structure"},"ssm:SessionDocumentAccessCheck":{"name":"ssm:SessionDocumentAccessCheck","types":["Bool"],"description":"Filters access by verifying that a user has permission to access either the default Session Manager configuration document or the custom configuration document specified in a request"},"ssm:SourceInstanceARN":{"name":"ssm:SourceInstanceARN","types":["ARN"],"description":"Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made. This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile"},"ssm:SyncType":{"name":"ssm:SyncType","types":["String"],"description":"Filters access by verifying that a user also has access to the ResourceDataSync SyncType specified in the request"},"ssm:resourceTag/${TagKey}":{"name":"ssm:resourceTag/${TagKey}","types":["String"],"description":"Filters access by a tag key-value pair assigned to the Systems Manager resource"},"ssm:resourceTag/aws:ssmmessages:session-id":{"name":"ssm:resourceTag/aws:ssmmessages:session-id","types":["String"],"description":"Filters access by based on a tag key-value pair assigned to the Systems Manager session resource"},"ssm:resourceTag/aws:ssmmessages:target-id":{"name":"ssm:resourceTag/aws:ssmmessages:target-id","types":["String"],"description":"Filters access by based on a tag key-value pair assigned to the Systems Manager session resource"},"ssm:resourceTag/tag-key":{"name":"ssm:resourceTag/tag-key","types":["String"],"description":"Filters access by based on a tag key-value pair assigned to the Systems Manager resource"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html"}