AWS Systems Manager (ssm)

Additions

Conditions

• ssm:resourceTag/aws:ssmmessages:session-id
  
  • Description:  Filters access by based on a tag key-value pair assigned to the Systems Manager session resource
  • Type:  String
• ssm:resourceTag/aws:ssmmessages:target-id
  
  • Description:  Filters access by based on a tag key-value pair assigned to the Systems Manager session resource
  • Type:  String

Updates

Actions

• ResumeSession
  
  Conditions
  
  • ＋ ssm:resourceTag/aws:ssmmessages:session-id
  • ＋ ssm:resourceTag/aws:ssmmessages:target-id
• TerminateSession
  
  Conditions
  
  • ＋ ssm:resourceTag/aws:ssmmessages:session-id
  • ＋ ssm:resourceTag/aws:ssmmessages:target-id

Resources

• document
  
  Conditions
  
  • ＋ ssm:resourceTag/${TagKey}
• session
  
  Conditions
  
  • ＋ ssm:resourceTag/aws:ssmmessages:session-id
  • ＋ ssm:resourceTag/aws:ssmmessages:target-id