SSM Runbook Fails

IAMResourceId is a IAM resource unique identifier. You need to obtain the UserId from a CLi/APi Call. https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html

The unique ID for an IAM resource is not available in the IAM console. To get the unique ID, you can use the following AWS CLI commands or IAM API calls.

aws iam get-user --user-name <username>

This will return the UserId. This is what needs to be passed to the Document as the IAMResourceID

EG:

{
    "User": {
        "Path": "/",
        "UserName": "myuser",
        "UserId": "DFG87DFG87DFGDFG6",
        "Arn": "arn:aws:iam::111111111111:user/myuser",
        "CreateDate": "2023-04-23T12:26:53+00:00"
    }
}