SSM Messages
Prefix ssmmessages, 4 actions · Domain Management & Governance
14 AWS managed policies. 2 have reviewed guidance; the rest have authoritative permission data pending editorial review. 1 are service-linked role policies, shown with permission data only.
User access (1)
- AmazonSSMFullAccessAdmin
Operator and limited (11)
- AmazonEKSLocalOutpostClusterPolicyOperator
- AmazonElasticFileSystemsUtilsOperator
- AmazonRDSCustomInstanceProfileRolePolicyOperator
- AmazonSageMakerClusterInstanceRolePolicyOperator
- AmazonSSMManagedEC2InstanceDefaultPolicyOperator
- AmazonSSMManagedInstanceCoreOperator
- AWSCloud9EnvironmentMemberOperator
- AWSCloud9SSMInstanceProfileOperator
- AWSEC2SqlHaInstancePolicyOperator
- AWSRefactoringToolkitFullAccessOperator
- AWSRefactoringToolkitSidecarPolicyOperator
Service roles (1)
- AmazonEC2RoleforSSMHigh privilegeOperator
Service-linked roles (1)
Also grants SSM Messages actions (13)
- AdministratorAccess
- AIDevOpsAgentActionsPolicy
- AmazonECSServiceRolePolicy
- AmazonEKSLocalOutpostServiceRolePolicy
- AmazonSSMAutomationRole
- AWSCloud9Administrator
- AWSCloud9User
- AWSCODAPermissionsBoundary
- AWSCodeBuildAdminAccess
- AWSCodeBuildDeveloperAccess
- AWSMcpServiceActionsFullAccess
- AWSSystemsManagerJustInTimeAccessTokenPolicy
- PowerUserAccess
createcontrolchannel createdatachannel opencontrolchannel opendatachannel
Actions (4)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| ssmmessages:CreateControlChannel | Write | 16 | 1 |
| ssmmessages:CreateDataChannel | Write | 15 | 1 |
| ssmmessages:OpenControlChannel | Write | 16 | 1 |
| ssmmessages:OpenDataChannel | Write | 15 | 11 |