Usando AWS re:Post, accetti AWS re:Post Termini di utilizzo
AWS re:Postre:Post

SSM Association Role

0

What specific role is needed to run start-associations-once in the CLI?

Argomenti
Gestione e amministrazioneSicurezza, identità e conformità
Tag
Gestore dei sistemi AWSPolitiche IAM
Lingua
English
rePost-User-olmec
posta 8 mesi fa282 visualizzazioni
1 Risposta
0

I believe your question is more towards, what are the permissions required for running SSM start-associations-once.

Please refer Actions, resources, and condition keys for AWS Systems Manager and search for startassociation in this page, you'll see what are the permissions and resource access are required. Basically, your CLI user must have StartAssociationsOnce for the resource arn:aws:ssm:*:<AccountId>:association/<SSM_ResourceName>. SSMResourceName can be "*" as well if you want to give access for all resources.

Hope this helps.

Comment here if you have additional questions, happy to help.

Abhishek

profile pictureAWS
ESPERTO
secondabhi_aws
con risposta 8 mesi fa
  • rePost-User-olmec
    8 mesi fa

    Can you provide the exact CLI command? I am currently trying to run aws ssm start-associations-once
    --association-id "8dfe3659-4309-493a-8755-0123456789ab" What parameters should I add to permissions? This command doesn't have a "parameters" field.

  • rePost-User-olmec
    8 mesi fa

    arn:aws:iam::8X4956999XX:role/aws-service-role/ssm.amazonaws.com/AWSServiceRoleForAmazonSSM?

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande

Contenuto pertinente