ssm:SendCommand

Executes commands (via command documents) on one or more remote instances.

Supported Resource-Level Permissions

  • arn:aws:ssm:$region:$account:document/$name
  • arn:aws:ec2:*:*:instance/*

Supported Service Specific Conditions

  • ssm:resourceTag/tag-key

Comments & Examples