ssm:*AWS AWS Systems Manager IAM Actions
156 IAM actions for ssm:*
Actions
156 actions available. Filter by access level or search by name.
Filter:
| Action | Access Level |
|---|---|
ssm:AddTagsToResource | Tagging |
ssm:AssociateOpsItemRelatedItem | Write |
ssm:CancelCommand | Write |
ssm:CancelMaintenanceWindowExecution | Write |
ssm:CreateActivation | Write |
ssm:CreateAssociation | Write |
ssm:CreateAssociationBatch | Write |
ssm:CreateDocument | Write |
ssm:CreateMaintenanceWindow | Write |
ssm:CreateOpsItem | Write |
ssm:CreateOpsMetadata | Write |
ssm:CreatePatchBaseline | Write |
ssm:CreateResourceDataSync | Write |
ssm:DeleteActivation | Write |
ssm:DeleteAssociation | Write |
ssm:DeleteDocument | Write |
ssm:DeleteInventory | Write |
ssm:DeleteMaintenanceWindow | Write |
ssm:DeleteOpsItem | Write |
ssm:DeleteOpsMetadata | Write |
ssm:DeleteParameter | Write |
ssm:DeleteParameters | Write |
ssm:DeletePatchBaseline | Write |
ssm:DeleteResourceDataSync | Write |
ssm:DeleteResourcePolicy | Permissions |
ssm:DeregisterManagedInstance | Write |
ssm:DeregisterPatchBaselineForPatchGroup | Write |
ssm:DeregisterTargetFromMaintenanceWindow | Write |
ssm:DeregisterTaskFromMaintenanceWindow | Write |
ssm:DescribeActivations | Read |
ssm:DescribeAssociation | Read |
ssm:DescribeAssociationExecutions | Read |
ssm:DescribeAssociationExecutionTargets | Read |
ssm:DescribeAutomationExecutions | Read |
ssm:DescribeAutomationStepExecutions | Read |
ssm:DescribeAvailablePatches | Read |
ssm:DescribeDocument | Read |
ssm:DescribeDocumentParameters | Read |
ssm:DescribeDocumentPermission | Permissions |
ssm:DescribeEffectiveInstanceAssociations | Read |
ssm:DescribeEffectivePatchesForPatchBaseline | Read |
ssm:DescribeInstanceAssociationsStatus | Read |
ssm:DescribeInstanceInformation | Read |
ssm:DescribeInstancePatches | Read |
ssm:DescribeInstancePatchStates | Read |
ssm:DescribeInstancePatchStatesForPatchGroup | Read |
ssm:DescribeInstanceProperties | Read |
ssm:DescribeInventoryDeletions | Read |
ssm:DescribeMaintenanceWindowExecutions | Read |
ssm:DescribeMaintenanceWindowExecutionTaskInvocations | Read |
ssm:DescribeMaintenanceWindowExecutionTasks | Read |
ssm:DescribeMaintenanceWindows | Read |
ssm:DescribeMaintenanceWindowSchedule | Read |
ssm:DescribeMaintenanceWindowsForTarget | Read |
ssm:DescribeMaintenanceWindowTargets | Read |
ssm:DescribeMaintenanceWindowTasks | Read |
ssm:DescribeOpsItems | Read |
ssm:DescribeParameters | Read |
ssm:DescribePatchBaselines | Read |
ssm:DescribePatchGroups | Read |
ssm:DescribePatchGroupState | Read |
ssm:DescribePatchProperties | Read |
ssm:DescribeSessions | Read |
ssm:DisassociateOpsItemRelatedItem | Write |
ssm:ExecuteAPI | Read |
ssm:GetAccessToken | Read |
ssm:GetAutomationExecution | Read |
ssm:GetCalendar | Read |
ssm:GetCalendarState | Read |
ssm:GetCommandInvocation | Read |
ssm:GetConnectionStatus | Read |
ssm:GetDefaultPatchBaseline | Read |
ssm:GetDeployablePatchSnapshotForInstance | Read |
ssm:GetDocument | Read |
ssm:GetExecutionPreview | Read |
ssm:GetInventory | Read |
ssm:GetInventorySchema | Read |
ssm:GetMaintenanceWindow | Read |
ssm:GetMaintenanceWindowExecution | Read |
ssm:GetMaintenanceWindowExecutionTask | Read |
ssm:GetMaintenanceWindowExecutionTaskInvocation | Read |
ssm:GetMaintenanceWindowTask | Read |
ssm:GetManifest | Read |
ssm:GetOpsItem | Read |
ssm:GetOpsMetadata | Read |
ssm:GetOpsSummary | Read |
ssm:GetParameter | Read |
ssm:GetParameterHistory | Read |
ssm:GetParameters | Read |
ssm:GetParametersByPath | Read |
ssm:GetPatchBaseline | Read |
ssm:GetPatchBaselineForPatchGroup | Read |
ssm:GetResourcePolicies | Read |
ssm:GetServiceSetting | Read |
ssm:LabelParameterVersion | Read |
ssm:ListAssociations | List |
ssm:ListAssociationVersions | List |
ssm:ListCommandInvocations | List |
ssm:ListCommands | List |
ssm:ListComplianceItems | List |
ssm:ListComplianceSummaries | List |
ssm:ListDocumentMetadataHistory | List |
ssm:ListDocuments | List |
ssm:ListDocumentVersions | List |
ssm:ListInstanceAssociations | List |
ssm:ListInventoryEntries | List |
ssm:ListNodes | List |
ssm:ListNodesSummary | List |
ssm:ListOpsItemEvents | List |
ssm:ListOpsItemRelatedItems | List |
ssm:ListOpsMetadata | List |
ssm:ListResourceComplianceSummaries | List |
ssm:ListResourceDataSync | List |
ssm:ListTagsForResource | Tagging |
ssm:ModifyDocumentPermission | Permissions |
ssm:PutCalendar | Write |
ssm:PutComplianceItems | Write |
ssm:PutConfigurePackageResult | Write |
ssm:PutInventory | Write |
ssm:PutParameter | Write |
ssm:PutResourcePolicy | Permissions |
ssm:RegisterDefaultPatchBaseline | Write |
ssm:RegisterManagedInstance | Write |
ssm:RegisterPatchBaselineForPatchGroup | Write |
ssm:RegisterTargetWithMaintenanceWindow | Write |
ssm:RegisterTaskWithMaintenanceWindow | Write |
ssm:RemoveTagsFromResource | Tagging |
ssm:ResetServiceSetting | Write |
ssm:ResumeSession | Read |
ssm:SendAutomationSignal | Write |
ssm:SendCommand | Write |
ssm:StartAccessRequest | Write |
ssm:StartAssociationsOnce | Write |
ssm:StartAutomationExecution | Write |
ssm:StartChangeRequestExecution | Write |
ssm:StartExecutionPreview | Write |
ssm:StartSession | Write |
ssm:StopAutomationExecution | Write |
ssm:TerminateSession | Write |
ssm:UnlabelParameterVersion | Read |
ssm:UpdateAssociation | Write |
ssm:UpdateAssociationStatus | Write |
ssm:UpdateDocument | Write |
ssm:UpdateDocumentDefaultVersion | Write |
ssm:UpdateDocumentMetadata | Write |
ssm:UpdateInstanceAssociationStatus | Write |
ssm:UpdateInstanceInformation | Write |
ssm:UpdateMaintenanceWindow | Write |
ssm:UpdateMaintenanceWindowTarget | Write |
ssm:UpdateMaintenanceWindowTask | Write |
ssm:UpdateManagedInstanceRole | Permissions |
ssm:UpdateOpsItem | Write |
ssm:UpdateOpsMetadata | Write |
ssm:UpdatePatchBaseline | Write |
ssm:UpdateResourceDataSync | Write |
ssm:UpdateServiceSetting | Write |
Resource Types
ARN patterns for resources in this service.
| Resource | ARN Pattern |
|---|---|
${RelativeId} | arn:aws:ssm:${Region}:${Account}:${RelativeId} |
Condition Keys
Condition keys you can use in IAM policy conditions for this service.
aws:RequestTag/${TagKey}aws:ResourceTag/${TagKey}aws:TagKeysec2:SourceInstanceARNssm:AccessRequestIdssm:AutoApprovessm:DocumentCategoriesssm:DocumentTypessm:DocumentVersionssm:InventoryTypeNamessm:Overwritessm:Policiesssm:Recursivessm:SessionDocumentAccessCheckssm:SourceInstanceARNssm:SyncTypessm:resourceTag/${TagKey}ssm:resourceTag/aws:ssmmessages:session-idssm:resourceTag/aws:ssmmessages:target-idssm:resourceTag/tag-keyLearn AWS the Practical Way
Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.
Subscribe to NewsletterLearn AWS the Practical Way
Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.
Subscribe to NewsletterQuick Facts
Total Actions156
Prefix
ssmResource Types1
Condition Keys20
Access Level Breakdown
Read66
Write64
List18
Permissions5
Tagging3