ssm:RegisterManagedInstance is a Write access-level action in the ssm service. Grants permission to register a Systems Manager Agent
This action does not support resource-level permissions; use "Resource": "*" in your policy.
Keys you can use in the Condition block of a policy that grants ssm:RegisterManagedInstance.
Filters access by 'Create' requests based on the allowed set of values for a specified tags
Filters access by 'Create' requests based on whether mandatory tags are included in the request
Filters access by the AWS account ID associated with the managed node making the request. Available only in VPC endpoint policies and service control policies (SCPs)
Filters access by the AWS Organizations ID associated with the managed node making the request. Available only in VPC endpoint policies and service control policies (SCPs)
A minimal policy that allows ssm:RegisterManagedInstance. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowSsmRegisterManagedInstance",
"Effect": "Allow",
"Action": "ssm:RegisterManagedInstance",
"Resource": "*"
}
]
}