ssm:PutParameter is a Write access-level action in the ssm service. Grants permission to create an SSM parameter
ARNs that ssm:PutParameter can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants ssm:PutParameter.
Filters access by 'Create' requests based on the allowed set of values for a specified tags
Filters access by 'Create' requests based on whether mandatory tags are included in the request
Filters access by controling whether Systems Manager parameters can be overwritten
Filters access by controlling whether an IAM Entity (user or role) can create or update a parameter that includes a parameter policy
Filters access by based on a tag key-value pair assigned to the AWS resource
Filters access by based on a tag key-value pair assigned to the Systems Manager resource
A minimal policy that allows ssm:PutParameter. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowSsmPutParameter",
"Effect": "Allow",
"Action": "ssm:PutParameter",
"Resource": "*"
}
]
}