Disable copy and paste options in AWS SSM

Unfortunately, there is no built-in option in AWS SSM to directly disable copy and paste operations. However, you can achieve a higher level of control and restriction using IAM.

Ensure that only authorized users have access to start SSM sessions. Define an IAM policy that limits which users can access SSM sessions.

Example IAM Policy to Restrict SSM Session for instances with tag Environment: Production

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Deny",
            "Action": [
                "ssm:SendCommand",
                "ssm:StartSession",
                "ssm:ResumeSession",
                "ssm:TerminateSession"
            ],
            "Resource": "*",
            "Condition": {
                "StringEquals": {
                    "ssm:ResourceTag/Environment": "Production"
                }
            }
        }
    ]
}