本文為英文版的機器翻譯版本,如內容有任何歧義或不一致之處,概以英文版為準。
AmazonSSMManagedEC2InstanceDefaultPolicy
說明:此原則會在EC2執行個體上啟用 AWS Systems Manager 功能。
AmazonSSMManagedEC2InstanceDefaultPolicy
是AWS 受管理的策略。
使用此政策
您可以附加AmazonSSMManagedEC2InstanceDefaultPolicy
至您的使用者、群組和角色。
政策詳情
-
類型: AWS 受管理的策略
-
創作時間:二零二二年八月三十日,晚上 20:54 UTC
-
編輯時間:二零二四年七月十六日,18:14 UTC
-
ARN:
arn:aws:iam::aws:policy/AmazonSSMManagedEC2InstanceDefaultPolicy
政策版本
策略版本:v2(預設值)
原則的預設版本是定義原則權限的版本。當具有策略的使用者或角色發出要求以存取 AWS 資源時,請 AWS 檢查原則的預設版本,以決定是否允許該要求。
JSON政策文件
{ "Version" : "2012-10-17", "Statement" : [ { "Sid" : "AllowSSMAgentPermissions", "Effect" : "Allow", "Action" : [ "ssm:DescribeAssociation", "ssm:GetDeployablePatchSnapshotForInstance", "ssm:GetDocument", "ssm:DescribeDocument", "ssm:GetManifest", "ssm:ListAssociations", "ssm:ListInstanceAssociations", "ssm:PutInventory", "ssm:PutComplianceItems", "ssm:PutConfigurePackageResult", "ssm:UpdateAssociationStatus", "ssm:UpdateInstanceAssociationStatus", "ssm:UpdateInstanceInformation" ], "Resource" : "*" }, { "Sid" : "AllowSSMChannelMessaging", "Effect" : "Allow", "Action" : [ "ssmmessages:CreateControlChannel", "ssmmessages:CreateDataChannel", "ssmmessages:OpenControlChannel", "ssmmessages:OpenDataChannel" ], "Resource" : "*" }, { "Sid" : "AllowSSMLegacyMessaging", "Effect" : "Allow", "Action" : [ "ec2messages:AcknowledgeMessage", "ec2messages:DeleteMessage", "ec2messages:FailMessage", "ec2messages:GetEndpoint", "ec2messages:GetMessages", "ec2messages:SendReply" ], "Resource" : "*" } ] }