Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

I am getting this status "Unable to assume the provided role" when I try to run patch baseline using maintenance window

0

I am trying to setup patching activities on ec2 instances. I referred this link https://docs.aws.amazon.com/systems-manager/latest/userguide/troubleshooting-maintenance-windows.html#incorrect-ssm-permissions . I am currently using the default patching baselines. Could you please help me understand what additional policies/permissions I need to add, apart from AmazonSSMManagedInstanceCore, for patching activities?

Topics
Security, Identity, & Compliance
Tags
AWS Identity and Access Management
Language
English
asked 2 years ago757 views
1 Answer
3
Accepted Answer

Hello.

What you need is the IAM role used by the maintenance window, not the EC2 IAM role.
Please create the IAM role used by the maintenance window by following the steps described in the document below.
https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-maintenance-perm-console.html#sysman-maintenance-role-policy
https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-maintenance-permissions.html

EXPERT
answered 2 years ago
EXPERT
reviewed 2 years ago
EXPERT
reviewed 2 years ago
EXPERT
reviewed 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content