AWS Systems Manager
(ssm)
IAM Changes
Services
2025-12-17
2025-12-17
1 new condition | 2 updated actions, 1 updated resource
Additions
Conditions
ssm:DocumentVersion
Description:
Filters access by verifying that a user has permission to access a specific version of a document
Type:
ArrayOfString
Updates
Actions
StartAutomationExecution
Resources
New_value: No
Old_value: Yes
+ automation-execution
Conditions
+ aws:ResourceTag/${TagKey}
+ ssm:DocumentVersion
StartChangeRequestExecution
Resources
New_value: No
Old_value: Yes
+ automation-execution
Conditions
+ aws:ResourceTag/${TagKey}
+ ssm:DocumentVersion
Resources
automation-definition
Conditions
+ ssm:DocumentType