greengrass:CreateSoftwareUpdateJob is a Write access-level action in the greengrass service. Grants permission to create an AWS IoT job that will trigger your Greengrass cores to update the software they are running
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows greengrass:CreateSoftwareUpdateJob. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowGreengrassCreateSoftwareUpdateJob",
"Effect": "Allow",
"Action": "greengrass:CreateSoftwareUpdateJob",
"Resource": "*"
}
]
}