4 ms·

Thanks for clarifying, I didn’t recheck since we rolled out SSM in mid-2019 and then scrambled when we realised we’d granted account wide S3 permissions. The ar

Thanks for clarifying, I didn’t recheck since we rolled out SSM in mid-2019 and then scrambled when we realised we’d granted account wide S3 permissions. The article I linked to also has a recommended minimal IAM policy for Run Command and SSM. I’ll update my comment to mention this.

mishappen 7y ago
It looks like the docs were update in June 2019 (https://github.com/awsdocs/aws-systems-manager-user-guide/commit/cad52f970cb1e00e8127fcc417dac196d5d402d5#diff-38461af5d055b906d0f68f62eb38e62a https://github.com/awsdocs/aws-systems-manager-user-guide/co...)