Al usar AWS re:Post, aceptas las AWS re:Post Términos de uso
AWS re:Postre:Post

SSM Association Role

0

What specific role is needed to run start-associations-once in the CLI?

Temas
Gestión y gobiernoSeguridad, identidad y cumplimiento
Etiquetas
AWS Systems ManagerPolíticas de IAM
Idioma
English
rePost-User-olmec
preguntada hace 8 meses282 visualizaciones
1 Respuesta
0

I believe your question is more towards, what are the permissions required for running SSM start-associations-once.

Please refer Actions, resources, and condition keys for AWS Systems Manager and search for startassociation in this page, you'll see what are the permissions and resource access are required. Basically, your CLI user must have StartAssociationsOnce for the resource arn:aws:ssm:*:<AccountId>:association/<SSM_ResourceName>. SSMResourceName can be "*" as well if you want to give access for all resources.

Hope this helps.

Comment here if you have additional questions, happy to help.

Abhishek

profile pictureAWS
EXPERTO
secondabhi_aws
respondido hace 8 meses
  • rePost-User-olmec
    hace 8 meses

    Can you provide the exact CLI command? I am currently trying to run aws ssm start-associations-once
    --association-id "8dfe3659-4309-493a-8755-0123456789ab" What parameters should I add to permissions? This command doesn't have a "parameters" field.

  • rePost-User-olmec
    hace 8 meses

    arn:aws:iam::8X4956999XX:role/aws-service-role/ssm.amazonaws.com/AWSServiceRoleForAmazonSSM?

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas

Contenido relevante