Action Description Resources Conditions
Adds or overwrites one or more tags for the specified resource.
  • arn:aws:ssm:$region:$account:document/$name
Attempts to cancel the command specified by the Command ID.
  • ???
Registers your on-premises server or virtual machine with Amazon EC2 so that you can manage these resources using Run Command.
  • ???
Associates the specified SSM document with the specified instance.
  • arn:aws:ssm:$region:$account:document/$name
Associates the specified SSM document with the specified instances.
  • arn:aws:ssm:$region:$account:document/$name
Creates an SSM document.
  • ???
Create an SSM maintenance window.
  • ???
Create a SSM patch baseline.
  • ???
Creates a resource data sync configuration to a single bucket in Amazon S3.
  • ???
Deletes an activation.
  • ???
Disassociates the specified SSM document from the specified instance.
  • arn:aws:ssm:$region:$account:document/$name
Deletes the SSM document and all instance associations to the document.
  • arn:aws:ssm:$region:$account:document/$name
Delete an SSM maintenance window.
  • arn:aws:ssm:$region:$account:maintenancewindow/$resource-id
Delete a parameter from the system.
  • arn:aws:ssm:$region:$account:parameter/$name
Delete a list of parameters.
  • arn:aws:ssm:$region:$account:parameter/$name
Delete a SSM patch baseline.
  • arn:aws:ssm:$region:$account:patchbaseline/$resource-id
Deletes a Resource Data Sync configuration.
  • ???
Removes the server or virtual machine from the list of registered servers.
  • arn:aws:ssm:$region:$account:managed-instance/$managed-instance-name
Deregister a SSM patch baseline from a patch group.
  • arn:aws:ssm:$region:$account:patchbaseline/$resource-id
Deregister a target from SSM maintenance window.
  • arn:aws:ssm:$region:$account:maintenancewindow/$resource-id
Deregister a task from SSM maintenance window.
  • arn:aws:ssm:$region:$account:maintenancewindow/$resource-id
Details about the activation, including: the date and time the activation was created, the expiration date, the IAM role assigned to the instances in the activation, and the number of instances activated by this registration.
  • ???
Describes the associations for the specified SSM document or instance.
  • arn:aws:ssm:$region:$account:document/$name
Describes one or more available patches.
  • ???
Describes the specified SSM document.
  • arn:aws:ssm:$region:$account:document/$name
Describes the parameters for an SSM document.
  • arn:aws:ssm:$region:$account:document/$name
Describes the permissions for an SSM document.
  • arn:aws:ssm:$region:$account:document/$name
Describes the the evaluation of patch baseline for patches and corresponding state.
  • arn:aws:ssm:$region:$account:patchbaseline/$resource-id
Describes one or more of your instances.
  • arn:aws:ssm:$region:$account:document/$name
Describe one or more of your instance patch states. One per each instance ID.
  • ???
Describe one or more of your instance patch states over all instances in given patch group.
  • ???
Describe one or more of your instance patch states for a given instance ID.
  • ???
Describes one or more your instances.
  • arn:aws:ssm:$region:$account:document/$name
Describe one or more of your maintenance window execution task invocations history.
  • ???
Describe one or more of your maintenance window execution tasks history.
  • ???
Describe one or more of your maintenance window execution history.
  • arn:aws:ssm:$region:$account:maintenancewindow/$resource-id
Describe one or more of your maintenance windows targets.
  • arn:aws:ssm:$region:$account:maintenancewindow/$resource-id
Describe one or more of your maintenance windows tasks.
  • arn:aws:ssm:$region:$account:maintenancewindow/$resource-id
Describe one or more of your maintenance windows.
  • ???
Describes one or more parameters in Parameter Store.
  • *
Describes one or more SSM patch baselines.
  • ???
Get a high level patch state report of given patch group.
  • ???
Describes one or more patch group to SSM patch baseline mappings.
  • ???
Describe one or more Session Manager sessions.
  • ???
  • ???
Get the connection status for an instance.
  • ???
Get the default SSM patch baseline.
  • arn:aws:ssm:$region:$account:patchbaseline/$resource-id
Get the snapshot of patches to be installed for given instances.
  • ???
Gets the contents of the specified SSM document.
  • arn:aws:ssm:$region:$account:document/$name
Get a SSM maintenance window.
  • arn:aws:ssm:$region:$account:maintenancewindow/$resource-id
Get a SSM maintenance window execution.
  • ???
Get a SSM maintenance window execution task.
  • ???
Get a SSM maintenance window execution task invocation.
  • ???
Get a SSM maintenance window task.
  • arn:aws:ssm:$region:$account:maintenancewindow/$resource-id
  • arn:aws:ssm:$region:$account:windowtask/$resource-id
Fetches the installation description for a package.
  • ???
Get information about a parameter by using the parameter name.
  • arn:aws:ssm:$region:$account:parameter/$name
Query a list of all parameters used by the AWS account.
  • arn:aws:ssm:$region:$account:parameter/$name
Get details of a parameter.
  • arn:aws:ssm:$region:$account:parameter/$name
Retrieve parameters in a specific hierarchy.
  • arn:aws:ssm:$region:$account:parameter/$name
Get a SSM patch baseline
  • arn:aws:ssm:$region:$account:patchbaseline/$resource-id
Get the SSM patch baseline associated to the given patch group.
  • arn:aws:ssm:$region:$account:patchbaseline/$resource-id
Lists versions of the specified association.
  • ???
Lists the associations for the specified SSM document or instance.
  • ???
An invocation is copy of a command sent to a specific instance.
  • ???
Lists the commands requested by users of the AWS account.
  • ???
Describes one or more of your SSM documents.
  • ???
Returns a list of the tags assigned to the specified resource.
  • arn:aws:ssm:$region:$account:document/$name
Share a document publicly or privately.
  • arn:aws:ssm:$region:$account:document/$name
Registers a compliance type and other compliance details on a designated resource.
  • ???
Reports installation result for a package.
  • ???
Add one or more parameters to the system.
  • arn:aws:ssm:$region:$account:parameter/$name
Register a SSM patch baseline as the default.
  • arn:aws:ssm:$region:$account:patchbaseline/$resource-id
Register a SSM patch baseline to a patch group.
  • arn:aws:ssm:$region:$account:patchbaseline/$resource-id
Register a SSM window target to a maintenance window.
  • arn:aws:ssm:$region:$account:maintenancewindow/$resource-id
Register a SSM window task to a maintenance window.
  • arn:aws:ssm:$region:$account:maintenancewindow/$resource-id
Removes all tags from the specified resource.
  • arn:aws:ssm:$region:$account:document/$name
Resume a disconnected SSM session manager connection.
  • arn:aws:ssm:$region:$account:session/$resource-id
  • ???
Executes commands on one or more remote instances.
  • arn:aws:ssm:$region:$account:document/$name
Initiates execution of an Automation document.
  • ???
Start a connection to an instance using SSM Session Manager.
  • ???
Stop an Automation that is currently executing.
  • ???
Terminate an ongoing SSM Session Manager connection.
  • arn:aws:ssm:$region:$account:session/$resource-id
Updates the status of the SSM document associated with the specified instance.
  • arn:aws:ssm:$region:$account:document/$name
Updates the status of the SSM document associated with the specified instance.
  • arn:aws:ssm:$region:$account:document/$name
Update a SSM maintenance window.
  • arn:aws:ssm:$region:$account:maintenancewindow/$resource-id
Update a SSM maintenance window target.
  • arn:aws:ssm:$region:$account:maintenancewindow/$resource-id
  • arn:aws:ssm:$region:$account:windowtarget/$resource-id
Update a SSM maintenance window task.
  • arn:aws:ssm:$region:$account:maintenancewindow/$resource-id
  • arn:aws:ssm:$region:$account:windowtarget/$resource-id
Assigns or changes an Amazon Identity and Access Management (IAM) role to the managed instance.
  • arn:aws:ssm:$region:$account:maintenancewindow/$resource-id
Update a SSM patch baseline.
  • arn:aws:ssm:$region:$account:patchbaseline/$resource-id