aws-iam-policy-types/dist/cjs/actions/ssm.d.ts

Autogenerated Typescript types for AWS IAM Policy and enums for all policy actions

/**
 * All IAM policy actions for AWS Systems Manager (SSM)
 *
 * Extracted by `aws-iam-policy` from
 * https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html
 *
 * 2025-02-24T21:49:54.777Z
 */
export declare enum AwsSsmActions {
    /**
     * Grants permission to add or overwrite one or more tags for a specified AWS reso
     * urce
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_AddTagsToResource.html
     */
    AddTagsToResource = "ssm:AddTagsToResource",
    /**
     * Grants permission to associate RelatedItem to an OpsItem
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_AssociateOpsItemRelatedItem.html
     */
    AssociateOpsItemRelatedItem = "ssm:AssociateOpsItemRelatedItem",
    /**
     * Grants permission to cancel a specified Run Command command
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CancelCommand.html
     */
    CancelCommand = "ssm:CancelCommand",
    /**
     * Grants permission to cancel an in-progress maintenance window execution
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CancelMaintenanceWindowExecution.html
     */
    CancelMaintenanceWindowExecution = "ssm:CancelMaintenanceWindowExecution",
    /**
     * Grants permission to create an activation that is used to register on-premises
     * servers and virtual machines (VMs) with Systems Manager
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateActivation.html
     */
    CreateActivation = "ssm:CreateActivation",
    /**
     * Grants permission to associate a specified Systems Manager document with specif
     * ied instances or other targets
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateAssociation.html
     */
    CreateAssociation = "ssm:CreateAssociation",
    /**
     * Grants permission to combine entries for multiple CreateAssociation operations
     * in a single command
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateAssociationBatch.html
     */
    CreateAssociationBatch = "ssm:CreateAssociationBatch",
    /**
     * Grants permission to create a Systems Manager SSM document
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateDocument.html
     */
    CreateDocument = "ssm:CreateDocument",
    /**
     * Grants permission to create a maintenance window
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateMaintenanceWindow.html
     */
    CreateMaintenanceWindow = "ssm:CreateMaintenanceWindow",
    /**
     * Grants permission to create an OpsItem in OpsCenter
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateOpsItem.html
     */
    CreateOpsItem = "ssm:CreateOpsItem",
    /**
     * Grants permission to create an OpsMetadata object for an AWS resource
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateOpsMetadata.html
     */
    CreateOpsMetadata = "ssm:CreateOpsMetadata",
    /**
     * Grants permission to create a patch baseline
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreatePatchBaseline.html
     */
    CreatePatchBaseline = "ssm:CreatePatchBaseline",
    /**
     * Grants permission to create a resource data sync configuration, which regularly
     * collects inventory data from managed instances and updates the data in an Amazo
     * n S3 bucket
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateResourceDataSync.html
     */
    CreateResourceDataSync = "ssm:CreateResourceDataSync",
    /**
     * Grants permission to delete a specified activation for managed instances
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteActivation.html
     */
    DeleteActivation = "ssm:DeleteActivation",
    /**
     * Grants permission to disassociate a specified SSM document from a specified ins
     * tance
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteAssociation.html
     */
    DeleteAssociation = "ssm:DeleteAssociation",
    /**
     * Grants permission to delete a specified SSM document and its instance associati
     * ons
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteDocument.html
     */
    DeleteDocument = "ssm:DeleteDocument",
    /**
     * Grants permission to delete a specified custom inventory type, or the data asso
     * ciated with a custom inventory type
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteInventory.html
     */
    DeleteInventory = "ssm:DeleteInventory",
    /**
     * Grants permission to delete a specified maintenance window
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteMaintenanceWindow.html
     */
    DeleteMaintenanceWindow = "ssm:DeleteMaintenanceWindow",
    /**
     * Grants permission to delete an OpsItem
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteOpsItem.html
     */
    DeleteOpsItem = "ssm:DeleteOpsItem",
    /**
     * Grants permission to delete an OpsMetadata object
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteOpsMetadata.html
     */
    DeleteOpsMetadata = "ssm:DeleteOpsMetadata",
    /**
     * Grants permission to delete a specified SSM parameter
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteParameter.html
     */
    DeleteParameter = "ssm:DeleteParameter",
    /**
     * Grants permission to delete multiple specified SSM parameters
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteParameters.html
     */
    DeleteParameters = "ssm:DeleteParameters",
    /**
     * Grants permission to delete a specified patch baseline
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeletePatchBaseline.html
     */
    DeletePatchBaseline = "ssm:DeletePatchBaseline",
    /**
     * Grants permission to delete a specified resource data sync
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteResourceDataSync.html
     */
    DeleteResourceDataSync = "ssm:DeleteResourceDataSync",
    /**
     * Grants permission to delete a Systems Manager resource policy
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteResourcePolicy.html
     */
    DeleteResourcePolicy = "ssm:DeleteResourcePolicy",
    /**
     * Grants permission to deregister a specified on-premises server or virtual machi
     * ne (VM) from Systems Manager
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeregisterManagedInstance.html
     */
    DeregisterManagedInstance = "ssm:DeregisterManagedInstance",
    /**
     * Grants permission to deregister a specified patch baseline from being the defau
     * lt patch baseline for a specified patch group
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeregisterPatchBaselineForPatchGroup.html
     */
    DeregisterPatchBaselineForPatchGroup = "ssm:DeregisterPatchBaselineForPatchGroup",
    /**
     * Grants permission to deregister a specified target from a maintenance window
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeregisterTargetFromMaintenanceWindow.html
     */
    DeregisterTargetFromMaintenanceWindow = "ssm:DeregisterTargetFromMaintenanceWindow",
    /**
     * Grants permission to deregister a specified task from a maintenance window
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeregisterTaskFromMaintenanceWindow.html
     */
    DeregisterTaskFromMaintenanceWindow = "ssm:DeregisterTaskFromMaintenanceWindow",
    /**
     * Grants permission to view details about a specified managed instance activation
     * , such as when it was created and the number of instances registered using the
     * activation
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeActivations.html
     */
    DescribeActivations = "ssm:DescribeActivations",
    /**
     * Grants permission to view details about the specified association for a specifi
     * ed instance or target
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAssociation.html
     */
    DescribeAssociation = "ssm:DescribeAssociation",
    /**
     * Grants permission to view information about a specified association execution
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAssociationExecutionTargets.html
     */
    DescribeAssociationExecutionTargets = "ssm:DescribeAssociationExecutionTargets",
    /**
     * Grants permission to view all executions for a specified association
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAssociationExecutions.html
     */
    DescribeAssociationExecutions = "ssm:DescribeAssociationExecutions",
    /**
     * Grants permission to view details about all active and terminated Automation ex
     * ecutions
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAutomationExecutions.html
     */
    DescribeAutomationExecutions = "ssm:DescribeAutomationExecutions",
    /**
     * Grants permission to view information about all active and terminated step exec
     * utions in an Automation workflow
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAutomationStepExecutions.html
     */
    DescribeAutomationStepExecutions = "ssm:DescribeAutomationStepExecutions",
    /**
     * Grants permission to view all patches eligible to include in a patch baseline
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAvailablePatches.html
     */
    DescribeAvailablePatches = "ssm:DescribeAvailablePatches",
    /**
     * Grants permission to view details about a specified SSM document
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeDocument.html
     */
    DescribeDocument = "ssm:DescribeDocument",
    /**
     * Grants permission to display information about SSM document parameters in the S
     * ystems Manager console (internal Systems Manager action)
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html
     */
    DescribeDocumentParameters = "ssm:DescribeDocumentParameters",
    /**
     * Grants permission to view the permissions for a specified SSM document
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeDocumentPermission.html
     */
    DescribeDocumentPermission = "ssm:DescribeDocumentPermission",
    /**
     * Grants permission to view all current associations for a specified instance
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeEffectiveInstanceAssociations.html
     */
    DescribeEffectiveInstanceAssociations = "ssm:DescribeEffectiveInstanceAssociations",
    /**
     * Grants permission to view details about the patches currently associated with t
     * he specified patch baseline (Windows only)
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeEffectivePatchesForPatchBaseline.html
     */
    DescribeEffectivePatchesForPatchBaseline = "ssm:DescribeEffectivePatchesForPatchBaseline",
    /**
     * Grants permission to view the status of the associations for a specified instan
     * ce
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstanceAssociationsStatus.html
     */
    DescribeInstanceAssociationsStatus = "ssm:DescribeInstanceAssociationsStatus",
    /**
     * Grants permission to view details about a specified instance
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstanceInformation.html
     */
    DescribeInstanceInformation = "ssm:DescribeInstanceInformation",
    /**
     * Grants permission to view status details about patches on a specified instance
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstancePatchStates.html
     */
    DescribeInstancePatchStates = "ssm:DescribeInstancePatchStates",
    /**
     * Grants permission to describe the high-level patch state for the instances in t
     * he specified patch group
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstancePatchStatesForPatchGroup.html
     */
    DescribeInstancePatchStatesForPatchGroup = "ssm:DescribeInstancePatchStatesForPatchGroup",
    /**
     * Grants permission to view general details about the patches on a specified inst
     * ance
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstancePatches.html
     */
    DescribeInstancePatches = "ssm:DescribeInstancePatches",
    /**
     * Grants permission to user's Amazon EC2 console to render managed instances' nod
     * es
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html
     */
    DescribeInstanceProperties = "ssm:DescribeInstanceProperties",
    /**
     * Grants permission to view details about a specified inventory deletion
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInventoryDeletions.html
     */
    DescribeInventoryDeletions = "ssm:DescribeInventoryDeletions",
    /**
     * Grants permission to view details of a specified task execution for a maintenan
     * ce window
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowExecutionTaskInvocations.html
     */
    DescribeMaintenanceWindowExecutionTaskInvocations = "ssm:DescribeMaintenanceWindowExecutionTaskInvocations",
    /**
     * Grants permission to view details about the tasks that ran during a specified m
     * aintenance window execution
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowExecutionTasks.html
     */
    DescribeMaintenanceWindowExecutionTasks = "ssm:DescribeMaintenanceWindowExecutionTasks",
    /**
     * Grants permission to view the executions of a specified maintenance window
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowExecutions.html
     */
    DescribeMaintenanceWindowExecutions = "ssm:DescribeMaintenanceWindowExecutions",
    /**
     * Grants permission to view details about upcoming executions of a specified main
     * tenance window
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowSchedule.html
     */
    DescribeMaintenanceWindowSchedule = "ssm:DescribeMaintenanceWindowSchedule",
    /**
     * Grants permission to view a list of the targets associated with a specified mai
     * ntenance window
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowTargets.html
     */
    DescribeMaintenanceWindowTargets = "ssm:DescribeMaintenanceWindowTargets",
    /**
     * Grants permission to view a list of the tasks associated with a specified maint
     * enance window
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowTasks.html
     */
    DescribeMaintenanceWindowTasks = "ssm:DescribeMaintenanceWindowTasks",
    /**
     * Grants permission to view information about all or specified maintenance window
     * s
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindows.html
     */
    DescribeMaintenanceWindows = "ssm:DescribeMaintenanceWindows",
    /**
     * Grants permission to view information about the maintenance window targets and
     * tasks associated with a specified instance
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowsForTarget.html
     */
    DescribeMaintenanceWindowsForTarget = "ssm:DescribeMaintenanceWindowsForTarget",
    /**
     * Grants permission to view details about specified OpsItems
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeOpsItems.html
     */
    DescribeOpsItems = "ssm:DescribeOpsItems",
    /**
     * Grants permission to view details about a specified SSM parameter
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeParameters.html
     */
    DescribeParameters = "ssm:DescribeParameters",
    /**
     * Grants permission to view information about patch baselines that meet the speci
     * fied criteria
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribePatchBaselines.html
     */
    DescribePatchBaselines = "ssm:DescribePatchBaselines",
    /**
     * Grants permission to view aggregated status details for patches for a specified
     * patch group
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribePatchGroupState.html
     */
    DescribePatchGroupState = "ssm:DescribePatchGroupState",
    /**
     * Grants permission to view information about the patch baseline for a specified
     * patch group
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribePatchGroups.html
     */
    DescribePatchGroups = "ssm:DescribePatchGroups",
    /**
     * Grants permission to view details of available patches for a specified operatin
     * g system and patch property
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribePatchProperties.html
     */
    DescribePatchProperties = "ssm:DescribePatchProperties",
    /**
     * Grants permission to view a list of recent Session Manager sessions that meet t
     * he specified search criteria
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeSessions.html
     */
    DescribeSessions = "ssm:DescribeSessions",
    /**
     * Grants permission to disassociate RelatedItem from an OpsItem
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DisassociateOpsItemRelatedItem.html
     */
    DisassociateOpsItemRelatedItem = "ssm:DisassociateOpsItemRelatedItem",
    /**
     * Grants permission to a Systems Manager delegated administrator to view related
     * resource details about OpsItems across multiple AWS accounts in the AWS Managem
     * ent Console
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html#systems-manager-namespace-other-API-operations
     */
    ExecuteAPI = "ssm:ExecuteAPI",
    /**
     * Grants permission to view details of a specified Automation execution
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_AutomationExecution.html
     */
    GetAutomationExecution = "ssm:GetAutomationExecution",
    /**
     * Grants permission to view details of a specific calendar
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-change-calendar-prereqs.html
     */
    GetCalendar = "ssm:GetCalendar",
    /**
     * Grants permission to view the calendar state for a change calendar or a list of
     * change calendars
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetCalendarState.html
     */
    GetCalendarState = "ssm:GetCalendarState",
    /**
     * Grants permission to view details about the command execution of a specified in
     * vocation or plugin
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetCommandInvocation.html
     */
    GetCommandInvocation = "ssm:GetCommandInvocation",
    /**
     * Grants permission to view the Session Manager connection status for a specified
     * managed instance
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetConnectionStatus.html
     */
    GetConnectionStatus = "ssm:GetConnectionStatus",
    /**
     * Grants permission to view the current default patch baseline for a specified op
     * erating system type
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetDefaultPatchBaseline.html
     */
    GetDefaultPatchBaseline = "ssm:GetDefaultPatchBaseline",
    /**
     * Grants permission to retrieve the current patch baseline snapshot for a specifi
     * ed instance
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetDeployablePatchSnapshotForInstance.html
     */
    GetDeployablePatchSnapshotForInstance = "ssm:GetDeployablePatchSnapshotForInstance",
    /**
     * Grants permission to view the contents of a specified SSM document
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetDocument.html
     */
    GetDocument = "ssm:GetDocument",
    /**
     * Grants permission to retrieve an existing preview that shows the effects that r
     * unning a specified Automation runbook would have on the targeted resources
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetExecutionPreview.html
     */
    GetExecutionPreview = "ssm:GetExecutionPreview",
    /**
     * Grants permission to view instance inventory details per the specified criteria
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetInventory.html
     */
    GetInventory = "ssm:GetInventory",
    /**
     * Grants permission to view a list of inventory types or attribute names for a sp
     * ecified inventory item type
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetInventorySchema.html
     */
    GetInventorySchema = "ssm:GetInventorySchema",
    /**
     * Grants permission to view details about a specified maintenance window
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindow.html
     */
    GetMaintenanceWindow = "ssm:GetMaintenanceWindow",
    /**
     * Grants permission to view details about a specified maintenance window executio
     * n
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindowExecution.html
     */
    GetMaintenanceWindowExecution = "ssm:GetMaintenanceWindowExecution",
    /**
     * Grants permission to view details about a specified maintenance window executio
     * n task
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindowExecutionTask.html
     */
    GetMaintenanceWindowExecutionTask = "ssm:GetMaintenanceWindowExecutionTask",
    /**
     * Grants permission to view details about a specific maintenance window task runn
     * ing on a specific target
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindowExecutionTaskInvocation.html
     */
    GetMaintenanceWindowExecutionTaskInvocation = "ssm:GetMaintenanceWindowExecutionTaskInvocation",
    /**
     * Grants permission to view details about tasks registered with a specified maint
     * enance window
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindowTask.html
     */
    GetMaintenanceWindowTask = "ssm:GetMaintenanceWindowTask",
    /**
     * Grants permission to Systems Manager and SSM Agent to determine package install
     * ation requirements for an instance (internal Systems Manager call)
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html
     */
    GetManifest = "ssm:GetManifest",
    /**
     * Grants permission to view information about a specified OpsItem
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetOpsItem.html
     */
    GetOpsItem = "ssm:GetOpsItem",
    /**
     * Grants permission to retrieve an OpsMetadata object
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetOpsMetadata.html
     */
    GetOpsMetadata = "ssm:GetOpsMetadata",
    /**
     * Grants permission to view summary information about OpsItems based on specified
     * filters and aggregators
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetOpsSummary.html
     */
    GetOpsSummary = "ssm:GetOpsSummary",
    /**
     * Grants permission to view information about a specified parameter
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetParameter.html
     */
    GetParameter = "ssm:GetParameter",
    /**
     * Grants permission to view details and changes for a specified parameter
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetParameterHistory.html
     */
    GetParameterHistory = "ssm:GetParameterHistory",
    /**
     * Grants permission to view information about multiple specified parameters
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetParameters.html
     */
    GetParameters = "ssm:GetParameters",
    /**
     * Grants permission to view information about parameters in a specified hierarchy
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetParametersByPath.html
     */
    GetParametersByPath = "ssm:GetParametersByPath",
    /**
     * Grants permission to view information about a specified patch baseline
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetPatchBaseline.html
     */
    GetPatchBaseline = "ssm:GetPatchBaseline",
    /**
     * Grants permission to view the ID of the current patch baseline for a specified
     * patch group
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetPatchBaselineForPatchGroup.html
     */
    GetPatchBaselineForPatchGroup = "ssm:GetPatchBaselineForPatchGroup",
    /**
     * Grants permission to retrieve lists of Systems Manager resource policies
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetResourcePolicies.html
     */
    GetResourcePolicies = "ssm:GetResourcePolicies",
    /**
     * Grants permission to view the account-level setting for an AWS service
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetServiceSetting.html
     */
    GetServiceSetting = "ssm:GetServiceSetting",
    /**
     * Grants permission to apply an identifying label to a specified version of a par
     * ameter
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_LabelParameterVersion.html
     */
    LabelParameterVersion = "ssm:LabelParameterVersion",
    /**
     * Grants permission to list versions of the specified association
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListAssociationVersions.html
     */
    ListAssociationVersions = "ssm:ListAssociationVersions",
    /**
     * Grants permission to list the associations for a specified SSM document or mana
     * ged instance
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListAssociations.html
     */
    ListAssociations = "ssm:ListAssociations",
    /**
     * Grants permission to list information about command invocations sent to a speci
     * fied instance
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListCommandInvocations.html
     */
    ListCommandInvocations = "ssm:ListCommandInvocations",
    /**
     * Grants permission to list the commands sent to a specified instance
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListCommands.html
     */
    ListCommands = "ssm:ListCommands",
    /**
     * Grants permission to list compliance status for specified resource types on a s
     * pecified resource
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListComplianceItems.html
     */
    ListComplianceItems = "ssm:ListComplianceItems",
    /**
     * Grants permission to list a summary count of compliant and noncompliant resourc
     * es for a specified compliance type
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListComplianceSummaries.html
     */
    ListComplianceSummaries = "ssm:ListComplianceSummaries",
    /**
     * Grants permission to view metadata history about a specified SSM document
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListDocumentMetadataHistory.html
     */
    ListDocumentMetadataHistory = "ssm:ListDocumentMetadataHistory",
    /**
     * Grants permission to list all versions of a specified document
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListDocumentVersions.html
     */
    ListDocumentVersions = "ssm:ListDocumentVersions",
    /**
     * Grants permission to view information about a specified SSM document
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListDocuments.html
     */
    ListDocuments = "ssm:ListDocuments",
    /**
     * Grants permission to SSM Agent to check for new State Manager associations (int
     * ernal Systems Manager call)
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html
     */
    ListInstanceAssociations = "ssm:ListInstanceAssociations",
    /**
     * Grants permission to view a list of specified inventory types for a specified i
     * nstance
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListInventoryEntries.html
     */
    ListInventoryEntries = "ssm:ListInventoryEntries",
    /**
     * Grants permission to view details about managed nodes based on specified filter
     * s
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListNodes.html
     */
    ListNodes = "ssm:ListNodes",
    /**
     * Grants permission to view summary information about managed nodes based on spec
     * ified filters and aggregators
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListNodesSummary.html
     */
    ListNodesSummary = "ssm:ListNodesSummary",
    /**
     * Grants permission to view details about OpsItemEvents
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListOpsItemEvents.html
     */
    ListOpsItemEvents = "ssm:ListOpsItemEvents",
    /**
     * Grants permission to view details about OpsItem RelatedItems
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListOpsItemRelatedItems.html
     */
    ListOpsItemRelatedItems = "ssm:ListOpsItemRelatedItems",
    /**
     * Grants permission to view a list of OpsMetadata objects
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListOpsMetadata.html
     */
    ListOpsMetadata = "ssm:ListOpsMetadata",
    /**
     * Grants permission to list resource-level summary count
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListResourceComplianceSummaries.html
     */
    ListResourceComplianceSummaries = "ssm:ListResourceComplianceSummaries",
    /**
     * Grants permission to list information about resource data sync configurations i
     * n an account
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListResourceDataSync.html
     */
    ListResourceDataSync = "ssm:ListResourceDataSync",
    /**
     * Grants permission to view a list of resource tags for a specified resource
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListTagsForResource.html
     */
    ListTagsForResource = "ssm:ListTagsForResource",
    /**
     * Grants permission to share a custom SSM document publicly or privately with spe
     * cified AWS accounts
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ModifyDocumentPermission.html
     */
    ModifyDocumentPermission = "ssm:ModifyDocumentPermission",
    /**
     * Grants permission to create/edit a specific calendar
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-change-calendar-prereqs.html
     */
    PutCalendar = "ssm:PutCalendar",
    /**
     * Grants permission to register a compliance type and other compliance details on
     * a specified resource
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutComplianceItems.html
     */
    PutComplianceItems = "ssm:PutComplianceItems",
    /**
     * Grants permission to SSM Agent to generate a report of the results of specific
     * agent requests (internal Systems Manager call)
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html
     */
    PutConfigurePackageResult = "ssm:PutConfigurePackageResult",
    /**
     * Grants permission to add or update inventory items on multiple specified manage
     * d instances
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutInventory.html
     */
    PutInventory = "ssm:PutInventory",
    /**
     * Grants permission to create an SSM parameter
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutParameter.html
     */
    PutParameter = "ssm:PutParameter",
    /**
     * Grants permission to create or update a Systems Manager resource policy
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutResourcePolicy.html
     */
    PutResourcePolicy = "ssm:PutResourcePolicy",
    /**
     * Grants permission to specify the default patch baseline for an operating system
     * type
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterDefaultPatchBaseline.html
     */
    RegisterDefaultPatchBaseline = "ssm:RegisterDefaultPatchBaseline",
    /**
     * Grants permission to register a Systems Manager Agent
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html
     */
    RegisterManagedInstance = "ssm:RegisterManagedInstance",
    /**
     * Grants permission to specify the default patch baseline for a specified patch g
     * roup
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterPatchBaselineForPatchGroup.html
     */
    RegisterPatchBaselineForPatchGroup = "ssm:RegisterPatchBaselineForPatchGroup",
    /**
     * Grants permission to register a target with a specified maintenance window
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterTargetWithMaintenanceWindow.html
     */
    RegisterTargetWithMaintenanceWindow = "ssm:RegisterTargetWithMaintenanceWindow",
    /**
     * Grants permission to register a task with a specified maintenance window
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterTaskWithMaintenanceWindow.html
     */
    RegisterTaskWithMaintenanceWindow = "ssm:RegisterTaskWithMaintenanceWindow",
    /**
     * Grants permission to remove a specified tag key from a specified resource
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RemoveTagsFromResource.html
     */
    RemoveTagsFromResource = "ssm:RemoveTagsFromResource",
    /**
     * Grants permission to reset the service setting for an AWS account to the defaul
     * t value
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ResetServiceSetting.html
     */
    ResetServiceSetting = "ssm:ResetServiceSetting",
    /**
     * Grants permission to reconnect a Session Manager session to a managed instance
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ResumeSession.html
     */
    ResumeSession = "ssm:ResumeSession",
    /**
     * Grants permission to send a signal to change the current behavior or status of
     * a specified Automation execution
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_SendAutomationSignal.html
     */
    SendAutomationSignal = "ssm:SendAutomationSignal",
    /**
     * Grants permission to run commands on one or more specified managed instances
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_SendCommand.html
     */
    SendCommand = "ssm:SendCommand",
    /**
     * Grants permission to run a specified association manually
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartAssociationsOnce.html
     */
    StartAssociationsOnce = "ssm:StartAssociationsOnce",
    /**
     * Grants permission to initiate the execution of an Automation document
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartAutomationExecution.html
     */
    StartAutomationExecution = "ssm:StartAutomationExecution",
    /**
     * Grants permission to initiate the execution of an Automation Change Template do
     * cument
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartChangeRequestExecution.html
     */
    StartChangeRequestExecution = "ssm:StartChangeRequestExecution",
    /**
     * Grants permission to create a preview showing the effects that running a specif
     * ied Automation runbook would have on the targeted resources
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartExecutionPreview.html
     */
    StartExecutionPreview = "ssm:StartExecutionPreview",
    /**
     * Grants permission to initiate a connection to a specified target for a Session
     * Manager session
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartSession.html
     */
    StartSession = "ssm:StartSession",
    /**
     * Grants permission to stop a specified Automation execution that is already in p
     * rogress
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StopAutomationExecution.html
     */
    StopAutomationExecution = "ssm:StopAutomationExecution",
    /**
     * Grants permission to permanently end a Session Manager connection to an instanc
     * e
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_TerminateSession.html
     */
    TerminateSession = "ssm:TerminateSession",
    /**
     * Grants permission to remove an identifying label from a specified version of a
     * parameter
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UnlabelParameterVersion.html
     */
    UnlabelParameterVersion = "ssm:UnlabelParameterVersion",
    /**
     * Grants permission to update an association and immediately run the association
     * on the specified targets
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateAssociation.html
     */
    UpdateAssociation = "ssm:UpdateAssociation",
    /**
     * Grants permission to update the status of the SSM document associated with a sp
     * ecified instance
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateAssociationStatus.html
     */
    UpdateAssociationStatus = "ssm:UpdateAssociationStatus",
    /**
     * Grants permission to update one or more values for an SSM document
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateDocument.html
     */
    UpdateDocument = "ssm:UpdateDocument",
    /**
     * Grants permission to change the default version of an SSM document
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateDocumentDefaultVersion.html
     */
    UpdateDocumentDefaultVersion = "ssm:UpdateDocumentDefaultVersion",
    /**
     * Grants permission to update the metadata of an SSM document
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateDocumentMetadata.html
     */
    UpdateDocumentMetadata = "ssm:UpdateDocumentMetadata",
    /**
     * Grants permission to SSM Agent to update the status of the association that it
     * is currently running (internal Systems Manager call)
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html
     */
    UpdateInstanceAssociationStatus = "ssm:UpdateInstanceAssociationStatus",
    /**
     * Grants permission to SSM Agent to send a heartbeat signal to the Systems Manage
     * r service in the cloud
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html
     */
    UpdateInstanceInformation = "ssm:UpdateInstanceInformation",
    /**
     * Grants permission to update a specified maintenance window
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateMaintenanceWindow.html
     */
    UpdateMaintenanceWindow = "ssm:UpdateMaintenanceWindow",
    /**
     * Grants permission to update a specified maintenance window target
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateMaintenanceWindowTarget.html
     */
    UpdateMaintenanceWindowTarget = "ssm:UpdateMaintenanceWindowTarget",
    /**
     * Grants permission to update a specified maintenance window task
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateMaintenanceWindowTask.html
     */
    UpdateMaintenanceWindowTask = "ssm:UpdateMaintenanceWindowTask",
    /**
     * Grants permission to assign or change the IAM role assigned to a specified mana
     * ged instance
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateManagedInstanceRole.html
     */
    UpdateManagedInstanceRole = "ssm:UpdateManagedInstanceRole",
    /**
     * Grants permission to edit or change an OpsItem
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateOpsItem.html
     */
    UpdateOpsItem = "ssm:UpdateOpsItem",
    /**
     * Grants permission to update an OpsMetadata object
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateOpsMetadata.html
     */
    UpdateOpsMetadata = "ssm:UpdateOpsMetadata",
    /**
     * Grants permission to update a specified patch baseline
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdatePatchBaseline.html
     */
    UpdatePatchBaseline = "ssm:UpdatePatchBaseline",
    /**
     * Grants permission to update a resource data sync
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateResourceDataSync.html
     */
    UpdateResourceDataSync = "ssm:UpdateResourceDataSync",
    /**
     * Grants permission to update the service setting for an AWS account
     *
     * See https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateServiceSetting.html
     */
    UpdateServiceSetting = "ssm:UpdateServiceSetting"
}