/** * All IAM policy actions for AWS Systems Manager (SSM) * * Extracted by `aws-iam-policy` from * https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html * * 2025-02-24T21:49:54.777Z */ export declare enum AwsSsmActions { /** * Grants permission to add or overwrite one or more tags for a specified AWS reso * urce * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_AddTagsToResource.html */ AddTagsToResource = "ssm:AddTagsToResource", /** * Grants permission to associate RelatedItem to an OpsItem * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_AssociateOpsItemRelatedItem.html */ AssociateOpsItemRelatedItem = "ssm:AssociateOpsItemRelatedItem", /** * Grants permission to cancel a specified Run Command command * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CancelCommand.html */ CancelCommand = "ssm:CancelCommand", /** * Grants permission to cancel an in-progress maintenance window execution * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CancelMaintenanceWindowExecution.html */ CancelMaintenanceWindowExecution = "ssm:CancelMaintenanceWindowExecution", /** * Grants permission to create an activation that is used to register on-premises * servers and virtual machines (VMs) with Systems Manager * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateActivation.html */ CreateActivation = "ssm:CreateActivation", /** * Grants permission to associate a specified Systems Manager document with specif * ied instances or other targets * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateAssociation.html */ CreateAssociation = "ssm:CreateAssociation", /** * Grants permission to combine entries for multiple CreateAssociation operations * in a single command * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateAssociationBatch.html */ CreateAssociationBatch = "ssm:CreateAssociationBatch", /** * Grants permission to create a Systems Manager SSM document * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateDocument.html */ CreateDocument = "ssm:CreateDocument", /** * Grants permission to create a maintenance window * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateMaintenanceWindow.html */ CreateMaintenanceWindow = "ssm:CreateMaintenanceWindow", /** * Grants permission to create an OpsItem in OpsCenter * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateOpsItem.html */ CreateOpsItem = "ssm:CreateOpsItem", /** * Grants permission to create an OpsMetadata object for an AWS resource * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateOpsMetadata.html */ CreateOpsMetadata = "ssm:CreateOpsMetadata", /** * Grants permission to create a patch baseline * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreatePatchBaseline.html */ CreatePatchBaseline = "ssm:CreatePatchBaseline", /** * Grants permission to create a resource data sync configuration, which regularly * collects inventory data from managed instances and updates the data in an Amazo * n S3 bucket * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateResourceDataSync.html */ CreateResourceDataSync = "ssm:CreateResourceDataSync", /** * Grants permission to delete a specified activation for managed instances * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteActivation.html */ DeleteActivation = "ssm:DeleteActivation", /** * Grants permission to disassociate a specified SSM document from a specified ins * tance * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteAssociation.html */ DeleteAssociation = "ssm:DeleteAssociation", /** * Grants permission to delete a specified SSM document and its instance associati * ons * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteDocument.html */ DeleteDocument = "ssm:DeleteDocument", /** * Grants permission to delete a specified custom inventory type, or the data asso * ciated with a custom inventory type * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteInventory.html */ DeleteInventory = "ssm:DeleteInventory", /** * Grants permission to delete a specified maintenance window * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteMaintenanceWindow.html */ DeleteMaintenanceWindow = "ssm:DeleteMaintenanceWindow", /** * Grants permission to delete an OpsItem * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteOpsItem.html */ DeleteOpsItem = "ssm:DeleteOpsItem", /** * Grants permission to delete an OpsMetadata object * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteOpsMetadata.html */ DeleteOpsMetadata = "ssm:DeleteOpsMetadata", /** * Grants permission to delete a specified SSM parameter * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteParameter.html */ DeleteParameter = "ssm:DeleteParameter", /** * Grants permission to delete multiple specified SSM parameters * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteParameters.html */ DeleteParameters = "ssm:DeleteParameters", /** * Grants permission to delete a specified patch baseline * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeletePatchBaseline.html */ DeletePatchBaseline = "ssm:DeletePatchBaseline", /** * Grants permission to delete a specified resource data sync * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteResourceDataSync.html */ DeleteResourceDataSync = "ssm:DeleteResourceDataSync", /** * Grants permission to delete a Systems Manager resource policy * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteResourcePolicy.html */ DeleteResourcePolicy = "ssm:DeleteResourcePolicy", /** * Grants permission to deregister a specified on-premises server or virtual machi * ne (VM) from Systems Manager * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeregisterManagedInstance.html */ DeregisterManagedInstance = "ssm:DeregisterManagedInstance", /** * Grants permission to deregister a specified patch baseline from being the defau * lt patch baseline for a specified patch group * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeregisterPatchBaselineForPatchGroup.html */ DeregisterPatchBaselineForPatchGroup = "ssm:DeregisterPatchBaselineForPatchGroup", /** * Grants permission to deregister a specified target from a maintenance window * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeregisterTargetFromMaintenanceWindow.html */ DeregisterTargetFromMaintenanceWindow = "ssm:DeregisterTargetFromMaintenanceWindow", /** * Grants permission to deregister a specified task from a maintenance window * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeregisterTaskFromMaintenanceWindow.html */ DeregisterTaskFromMaintenanceWindow = "ssm:DeregisterTaskFromMaintenanceWindow", /** * Grants permission to view details about a specified managed instance activation * , such as when it was created and the number of instances registered using the * activation * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeActivations.html */ DescribeActivations = "ssm:DescribeActivations", /** * Grants permission to view details about the specified association for a specifi * ed instance or target * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAssociation.html */ DescribeAssociation = "ssm:DescribeAssociation", /** * Grants permission to view information about a specified association execution * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAssociationExecutionTargets.html */ DescribeAssociationExecutionTargets = "ssm:DescribeAssociationExecutionTargets", /** * Grants permission to view all executions for a specified association * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAssociationExecutions.html */ DescribeAssociationExecutions = "ssm:DescribeAssociationExecutions", /** * Grants permission to view details about all active and terminated Automation ex * ecutions * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAutomationExecutions.html */ DescribeAutomationExecutions = "ssm:DescribeAutomationExecutions", /** * Grants permission to view information about all active and terminated step exec * utions in an Automation workflow * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAutomationStepExecutions.html */ DescribeAutomationStepExecutions = "ssm:DescribeAutomationStepExecutions", /** * Grants permission to view all patches eligible to include in a patch baseline * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAvailablePatches.html */ DescribeAvailablePatches = "ssm:DescribeAvailablePatches", /** * Grants permission to view details about a specified SSM document * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeDocument.html */ DescribeDocument = "ssm:DescribeDocument", /** * Grants permission to display information about SSM document parameters in the S * ystems Manager console (internal Systems Manager action) * * See https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html */ DescribeDocumentParameters = "ssm:DescribeDocumentParameters", /** * Grants permission to view the permissions for a specified SSM document * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeDocumentPermission.html */ DescribeDocumentPermission = "ssm:DescribeDocumentPermission", /** * Grants permission to view all current associations for a specified instance * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeEffectiveInstanceAssociations.html */ DescribeEffectiveInstanceAssociations = "ssm:DescribeEffectiveInstanceAssociations", /** * Grants permission to view details about the patches currently associated with t * he specified patch baseline (Windows only) * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeEffectivePatchesForPatchBaseline.html */ DescribeEffectivePatchesForPatchBaseline = "ssm:DescribeEffectivePatchesForPatchBaseline", /** * Grants permission to view the status of the associations for a specified instan * ce * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstanceAssociationsStatus.html */ DescribeInstanceAssociationsStatus = "ssm:DescribeInstanceAssociationsStatus", /** * Grants permission to view details about a specified instance * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstanceInformation.html */ DescribeInstanceInformation = "ssm:DescribeInstanceInformation", /** * Grants permission to view status details about patches on a specified instance * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstancePatchStates.html */ DescribeInstancePatchStates = "ssm:DescribeInstancePatchStates", /** * Grants permission to describe the high-level patch state for the instances in t * he specified patch group * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstancePatchStatesForPatchGroup.html */ DescribeInstancePatchStatesForPatchGroup = "ssm:DescribeInstancePatchStatesForPatchGroup", /** * Grants permission to view general details about the patches on a specified inst * ance * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstancePatches.html */ DescribeInstancePatches = "ssm:DescribeInstancePatches", /** * Grants permission to user's Amazon EC2 console to render managed instances' nod * es * * See https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html */ DescribeInstanceProperties = "ssm:DescribeInstanceProperties", /** * Grants permission to view details about a specified inventory deletion * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInventoryDeletions.html */ DescribeInventoryDeletions = "ssm:DescribeInventoryDeletions", /** * Grants permission to view details of a specified task execution for a maintenan * ce window * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowExecutionTaskInvocations.html */ DescribeMaintenanceWindowExecutionTaskInvocations = "ssm:DescribeMaintenanceWindowExecutionTaskInvocations", /** * Grants permission to view details about the tasks that ran during a specified m * aintenance window execution * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowExecutionTasks.html */ DescribeMaintenanceWindowExecutionTasks = "ssm:DescribeMaintenanceWindowExecutionTasks", /** * Grants permission to view the executions of a specified maintenance window * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowExecutions.html */ DescribeMaintenanceWindowExecutions = "ssm:DescribeMaintenanceWindowExecutions", /** * Grants permission to view details about upcoming executions of a specified main * tenance window * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowSchedule.html */ DescribeMaintenanceWindowSchedule = "ssm:DescribeMaintenanceWindowSchedule", /** * Grants permission to view a list of the targets associated with a specified mai * ntenance window * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowTargets.html */ DescribeMaintenanceWindowTargets = "ssm:DescribeMaintenanceWindowTargets", /** * Grants permission to view a list of the tasks associated with a specified maint * enance window * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowTasks.html */ DescribeMaintenanceWindowTasks = "ssm:DescribeMaintenanceWindowTasks", /** * Grants permission to view information about all or specified maintenance window * s * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindows.html */ DescribeMaintenanceWindows = "ssm:DescribeMaintenanceWindows", /** * Grants permission to view information about the maintenance window targets and * tasks associated with a specified instance * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowsForTarget.html */ DescribeMaintenanceWindowsForTarget = "ssm:DescribeMaintenanceWindowsForTarget", /** * Grants permission to view details about specified OpsItems * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeOpsItems.html */ DescribeOpsItems = "ssm:DescribeOpsItems", /** * Grants permission to view details about a specified SSM parameter * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeParameters.html */ DescribeParameters = "ssm:DescribeParameters", /** * Grants permission to view information about patch baselines that meet the speci * fied criteria * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribePatchBaselines.html */ DescribePatchBaselines = "ssm:DescribePatchBaselines", /** * Grants permission to view aggregated status details for patches for a specified * patch group * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribePatchGroupState.html */ DescribePatchGroupState = "ssm:DescribePatchGroupState", /** * Grants permission to view information about the patch baseline for a specified * patch group * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribePatchGroups.html */ DescribePatchGroups = "ssm:DescribePatchGroups", /** * Grants permission to view details of available patches for a specified operatin * g system and patch property * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribePatchProperties.html */ DescribePatchProperties = "ssm:DescribePatchProperties", /** * Grants permission to view a list of recent Session Manager sessions that meet t * he specified search criteria * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeSessions.html */ DescribeSessions = "ssm:DescribeSessions", /** * Grants permission to disassociate RelatedItem from an OpsItem * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DisassociateOpsItemRelatedItem.html */ DisassociateOpsItemRelatedItem = "ssm:DisassociateOpsItemRelatedItem", /** * Grants permission to a Systems Manager delegated administrator to view related * resource details about OpsItems across multiple AWS accounts in the AWS Managem * ent Console * * See https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html#systems-manager-namespace-other-API-operations */ ExecuteAPI = "ssm:ExecuteAPI", /** * Grants permission to view details of a specified Automation execution * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_AutomationExecution.html */ GetAutomationExecution = "ssm:GetAutomationExecution", /** * Grants permission to view details of a specific calendar * * See https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-change-calendar-prereqs.html */ GetCalendar = "ssm:GetCalendar", /** * Grants permission to view the calendar state for a change calendar or a list of * change calendars * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetCalendarState.html */ GetCalendarState = "ssm:GetCalendarState", /** * Grants permission to view details about the command execution of a specified in * vocation or plugin * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetCommandInvocation.html */ GetCommandInvocation = "ssm:GetCommandInvocation", /** * Grants permission to view the Session Manager connection status for a specified * managed instance * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetConnectionStatus.html */ GetConnectionStatus = "ssm:GetConnectionStatus", /** * Grants permission to view the current default patch baseline for a specified op * erating system type * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetDefaultPatchBaseline.html */ GetDefaultPatchBaseline = "ssm:GetDefaultPatchBaseline", /** * Grants permission to retrieve the current patch baseline snapshot for a specifi * ed instance * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetDeployablePatchSnapshotForInstance.html */ GetDeployablePatchSnapshotForInstance = "ssm:GetDeployablePatchSnapshotForInstance", /** * Grants permission to view the contents of a specified SSM document * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetDocument.html */ GetDocument = "ssm:GetDocument", /** * Grants permission to retrieve an existing preview that shows the effects that r * unning a specified Automation runbook would have on the targeted resources * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetExecutionPreview.html */ GetExecutionPreview = "ssm:GetExecutionPreview", /** * Grants permission to view instance inventory details per the specified criteria * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetInventory.html */ GetInventory = "ssm:GetInventory", /** * Grants permission to view a list of inventory types or attribute names for a sp * ecified inventory item type * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetInventorySchema.html */ GetInventorySchema = "ssm:GetInventorySchema", /** * Grants permission to view details about a specified maintenance window * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindow.html */ GetMaintenanceWindow = "ssm:GetMaintenanceWindow", /** * Grants permission to view details about a specified maintenance window executio * n * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindowExecution.html */ GetMaintenanceWindowExecution = "ssm:GetMaintenanceWindowExecution", /** * Grants permission to view details about a specified maintenance window executio * n task * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindowExecutionTask.html */ GetMaintenanceWindowExecutionTask = "ssm:GetMaintenanceWindowExecutionTask", /** * Grants permission to view details about a specific maintenance window task runn * ing on a specific target * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindowExecutionTaskInvocation.html */ GetMaintenanceWindowExecutionTaskInvocation = "ssm:GetMaintenanceWindowExecutionTaskInvocation", /** * Grants permission to view details about tasks registered with a specified maint * enance window * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindowTask.html */ GetMaintenanceWindowTask = "ssm:GetMaintenanceWindowTask", /** * Grants permission to Systems Manager and SSM Agent to determine package install * ation requirements for an instance (internal Systems Manager call) * * See https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html */ GetManifest = "ssm:GetManifest", /** * Grants permission to view information about a specified OpsItem * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetOpsItem.html */ GetOpsItem = "ssm:GetOpsItem", /** * Grants permission to retrieve an OpsMetadata object * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetOpsMetadata.html */ GetOpsMetadata = "ssm:GetOpsMetadata", /** * Grants permission to view summary information about OpsItems based on specified * filters and aggregators * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetOpsSummary.html */ GetOpsSummary = "ssm:GetOpsSummary", /** * Grants permission to view information about a specified parameter * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetParameter.html */ GetParameter = "ssm:GetParameter", /** * Grants permission to view details and changes for a specified parameter * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetParameterHistory.html */ GetParameterHistory = "ssm:GetParameterHistory", /** * Grants permission to view information about multiple specified parameters * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetParameters.html */ GetParameters = "ssm:GetParameters", /** * Grants permission to view information about parameters in a specified hierarchy * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetParametersByPath.html */ GetParametersByPath = "ssm:GetParametersByPath", /** * Grants permission to view information about a specified patch baseline * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetPatchBaseline.html */ GetPatchBaseline = "ssm:GetPatchBaseline", /** * Grants permission to view the ID of the current patch baseline for a specified * patch group * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetPatchBaselineForPatchGroup.html */ GetPatchBaselineForPatchGroup = "ssm:GetPatchBaselineForPatchGroup", /** * Grants permission to retrieve lists of Systems Manager resource policies * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetResourcePolicies.html */ GetResourcePolicies = "ssm:GetResourcePolicies", /** * Grants permission to view the account-level setting for an AWS service * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetServiceSetting.html */ GetServiceSetting = "ssm:GetServiceSetting", /** * Grants permission to apply an identifying label to a specified version of a par * ameter * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_LabelParameterVersion.html */ LabelParameterVersion = "ssm:LabelParameterVersion", /** * Grants permission to list versions of the specified association * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListAssociationVersions.html */ ListAssociationVersions = "ssm:ListAssociationVersions", /** * Grants permission to list the associations for a specified SSM document or mana * ged instance * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListAssociations.html */ ListAssociations = "ssm:ListAssociations", /** * Grants permission to list information about command invocations sent to a speci * fied instance * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListCommandInvocations.html */ ListCommandInvocations = "ssm:ListCommandInvocations", /** * Grants permission to list the commands sent to a specified instance * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListCommands.html */ ListCommands = "ssm:ListCommands", /** * Grants permission to list compliance status for specified resource types on a s * pecified resource * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListComplianceItems.html */ ListComplianceItems = "ssm:ListComplianceItems", /** * Grants permission to list a summary count of compliant and noncompliant resourc * es for a specified compliance type * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListComplianceSummaries.html */ ListComplianceSummaries = "ssm:ListComplianceSummaries", /** * Grants permission to view metadata history about a specified SSM document * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListDocumentMetadataHistory.html */ ListDocumentMetadataHistory = "ssm:ListDocumentMetadataHistory", /** * Grants permission to list all versions of a specified document * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListDocumentVersions.html */ ListDocumentVersions = "ssm:ListDocumentVersions", /** * Grants permission to view information about a specified SSM document * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListDocuments.html */ ListDocuments = "ssm:ListDocuments", /** * Grants permission to SSM Agent to check for new State Manager associations (int * ernal Systems Manager call) * * See https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html */ ListInstanceAssociations = "ssm:ListInstanceAssociations", /** * Grants permission to view a list of specified inventory types for a specified i * nstance * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListInventoryEntries.html */ ListInventoryEntries = "ssm:ListInventoryEntries", /** * Grants permission to view details about managed nodes based on specified filter * s * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListNodes.html */ ListNodes = "ssm:ListNodes", /** * Grants permission to view summary information about managed nodes based on spec * ified filters and aggregators * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListNodesSummary.html */ ListNodesSummary = "ssm:ListNodesSummary", /** * Grants permission to view details about OpsItemEvents * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListOpsItemEvents.html */ ListOpsItemEvents = "ssm:ListOpsItemEvents", /** * Grants permission to view details about OpsItem RelatedItems * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListOpsItemRelatedItems.html */ ListOpsItemRelatedItems = "ssm:ListOpsItemRelatedItems", /** * Grants permission to view a list of OpsMetadata objects * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListOpsMetadata.html */ ListOpsMetadata = "ssm:ListOpsMetadata", /** * Grants permission to list resource-level summary count * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListResourceComplianceSummaries.html */ ListResourceComplianceSummaries = "ssm:ListResourceComplianceSummaries", /** * Grants permission to list information about resource data sync configurations i * n an account * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListResourceDataSync.html */ ListResourceDataSync = "ssm:ListResourceDataSync", /** * Grants permission to view a list of resource tags for a specified resource * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListTagsForResource.html */ ListTagsForResource = "ssm:ListTagsForResource", /** * Grants permission to share a custom SSM document publicly or privately with spe * cified AWS accounts * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ModifyDocumentPermission.html */ ModifyDocumentPermission = "ssm:ModifyDocumentPermission", /** * Grants permission to create/edit a specific calendar * * See https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-change-calendar-prereqs.html */ PutCalendar = "ssm:PutCalendar", /** * Grants permission to register a compliance type and other compliance details on * a specified resource * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutComplianceItems.html */ PutComplianceItems = "ssm:PutComplianceItems", /** * Grants permission to SSM Agent to generate a report of the results of specific * agent requests (internal Systems Manager call) * * See https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html */ PutConfigurePackageResult = "ssm:PutConfigurePackageResult", /** * Grants permission to add or update inventory items on multiple specified manage * d instances * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutInventory.html */ PutInventory = "ssm:PutInventory", /** * Grants permission to create an SSM parameter * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutParameter.html */ PutParameter = "ssm:PutParameter", /** * Grants permission to create or update a Systems Manager resource policy * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutResourcePolicy.html */ PutResourcePolicy = "ssm:PutResourcePolicy", /** * Grants permission to specify the default patch baseline for an operating system * type * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterDefaultPatchBaseline.html */ RegisterDefaultPatchBaseline = "ssm:RegisterDefaultPatchBaseline", /** * Grants permission to register a Systems Manager Agent * * See https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html */ RegisterManagedInstance = "ssm:RegisterManagedInstance", /** * Grants permission to specify the default patch baseline for a specified patch g * roup * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterPatchBaselineForPatchGroup.html */ RegisterPatchBaselineForPatchGroup = "ssm:RegisterPatchBaselineForPatchGroup", /** * Grants permission to register a target with a specified maintenance window * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterTargetWithMaintenanceWindow.html */ RegisterTargetWithMaintenanceWindow = "ssm:RegisterTargetWithMaintenanceWindow", /** * Grants permission to register a task with a specified maintenance window * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterTaskWithMaintenanceWindow.html */ RegisterTaskWithMaintenanceWindow = "ssm:RegisterTaskWithMaintenanceWindow", /** * Grants permission to remove a specified tag key from a specified resource * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RemoveTagsFromResource.html */ RemoveTagsFromResource = "ssm:RemoveTagsFromResource", /** * Grants permission to reset the service setting for an AWS account to the defaul * t value * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ResetServiceSetting.html */ ResetServiceSetting = "ssm:ResetServiceSetting", /** * Grants permission to reconnect a Session Manager session to a managed instance * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ResumeSession.html */ ResumeSession = "ssm:ResumeSession", /** * Grants permission to send a signal to change the current behavior or status of * a specified Automation execution * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_SendAutomationSignal.html */ SendAutomationSignal = "ssm:SendAutomationSignal", /** * Grants permission to run commands on one or more specified managed instances * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_SendCommand.html */ SendCommand = "ssm:SendCommand", /** * Grants permission to run a specified association manually * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartAssociationsOnce.html */ StartAssociationsOnce = "ssm:StartAssociationsOnce", /** * Grants permission to initiate the execution of an Automation document * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartAutomationExecution.html */ StartAutomationExecution = "ssm:StartAutomationExecution", /** * Grants permission to initiate the execution of an Automation Change Template do * cument * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartChangeRequestExecution.html */ StartChangeRequestExecution = "ssm:StartChangeRequestExecution", /** * Grants permission to create a preview showing the effects that running a specif * ied Automation runbook would have on the targeted resources * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartExecutionPreview.html */ StartExecutionPreview = "ssm:StartExecutionPreview", /** * Grants permission to initiate a connection to a specified target for a Session * Manager session * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartSession.html */ StartSession = "ssm:StartSession", /** * Grants permission to stop a specified Automation execution that is already in p * rogress * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StopAutomationExecution.html */ StopAutomationExecution = "ssm:StopAutomationExecution", /** * Grants permission to permanently end a Session Manager connection to an instanc * e * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_TerminateSession.html */ TerminateSession = "ssm:TerminateSession", /** * Grants permission to remove an identifying label from a specified version of a * parameter * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UnlabelParameterVersion.html */ UnlabelParameterVersion = "ssm:UnlabelParameterVersion", /** * Grants permission to update an association and immediately run the association * on the specified targets * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateAssociation.html */ UpdateAssociation = "ssm:UpdateAssociation", /** * Grants permission to update the status of the SSM document associated with a sp * ecified instance * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateAssociationStatus.html */ UpdateAssociationStatus = "ssm:UpdateAssociationStatus", /** * Grants permission to update one or more values for an SSM document * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateDocument.html */ UpdateDocument = "ssm:UpdateDocument", /** * Grants permission to change the default version of an SSM document * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateDocumentDefaultVersion.html */ UpdateDocumentDefaultVersion = "ssm:UpdateDocumentDefaultVersion", /** * Grants permission to update the metadata of an SSM document * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateDocumentMetadata.html */ UpdateDocumentMetadata = "ssm:UpdateDocumentMetadata", /** * Grants permission to SSM Agent to update the status of the association that it * is currently running (internal Systems Manager call) * * See https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html */ UpdateInstanceAssociationStatus = "ssm:UpdateInstanceAssociationStatus", /** * Grants permission to SSM Agent to send a heartbeat signal to the Systems Manage * r service in the cloud * * See https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html */ UpdateInstanceInformation = "ssm:UpdateInstanceInformation", /** * Grants permission to update a specified maintenance window * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateMaintenanceWindow.html */ UpdateMaintenanceWindow = "ssm:UpdateMaintenanceWindow", /** * Grants permission to update a specified maintenance window target * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateMaintenanceWindowTarget.html */ UpdateMaintenanceWindowTarget = "ssm:UpdateMaintenanceWindowTarget", /** * Grants permission to update a specified maintenance window task * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateMaintenanceWindowTask.html */ UpdateMaintenanceWindowTask = "ssm:UpdateMaintenanceWindowTask", /** * Grants permission to assign or change the IAM role assigned to a specified mana * ged instance * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateManagedInstanceRole.html */ UpdateManagedInstanceRole = "ssm:UpdateManagedInstanceRole", /** * Grants permission to edit or change an OpsItem * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateOpsItem.html */ UpdateOpsItem = "ssm:UpdateOpsItem", /** * Grants permission to update an OpsMetadata object * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateOpsMetadata.html */ UpdateOpsMetadata = "ssm:UpdateOpsMetadata", /** * Grants permission to update a specified patch baseline * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdatePatchBaseline.html */ UpdatePatchBaseline = "ssm:UpdatePatchBaseline", /** * Grants permission to update a resource data sync * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateResourceDataSync.html */ UpdateResourceDataSync = "ssm:UpdateResourceDataSync", /** * Grants permission to update the service setting for an AWS account * * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateServiceSetting.html */ UpdateServiceSetting = "ssm:UpdateServiceSetting" }