AWSQuickSetupPatchPolicyLambdaExecutionPolicy

Last Modified

Jun 3, 2026

June 3, 2026 at 03:03 PM UTC

Version

v1

Total Versions

1

Created

Jun 3, 2026

Actions

4

Policy Document

View on GitHub
{
  "PolicyVersion": {
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Sid": "ManageSSMAssociations",
          "Effect": "Allow",
          "Action": [
            "ssm:DescribeAssociationExecutions",
            "ssm:UpdateAssociation",
            "ssm:DescribeAssociation"
          ],
          "Resource": [
            "arn:aws:ssm:*:*:association/*",
            "arn:aws:ssm:*:*:document/AWSQuickSetup-*",
            "arn:aws:ssm:*:*:document/AWSQuickSetupType-*"
          ]
        },
        {
          "Sid": "PassQuickSetupAutomationRole",
          "Effect": "Allow",
          "Action": [
            "iam:PassRole"
          ],
          "Resource": "arn:aws:iam::*:role/AWS-QuickSetup-AutomationRole-*",
          "Condition": {
            "StringEquals": {
              "iam:PassedToService": "ssm.amazonaws.com"
            }
          }
        }
      ]
    },
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "CreateDate": "2026-06-03T14:12:26+00:00"
  }
}

Version History (1 recorded)

Raw history
v1new policy

4 actions added

c607147
Permissions management: iam:PassRole: iam:PassRole