Set up an identity access management (IAM) role for an Amazon Elastic Compute Cloud (EC2) instance

Procedure

1. Go to IAM → Roles.
2. Create a new role.
3. Select EC2 as the Trusted entity type.
4. Add the following permission policies to the role:
   • AmazonSSMFullAccess
   • AmazonSSMManagedInstanceCore
   • EC2InstanceProfileForImageBuilder
5. Name the role.
6. Finish creating the role.
7. Edit the role to add the following inline policy:

   {
       "Version": "2012-10-17",
       "Statement": [
           {
               "Sid": "VisualEditor0",
               "Effect": "Allow",
               "Action": [
                   "ssm:PutParameter",
                   "ssm:LabelParameterVersion",
                   "ssm:DeleteParameter",
                   "ssm:UnlabelParameterVersion",
                   "ssm:DescribeParameters",
                   "ssm:GetParameterHistory",
                   "ssm:DescribeDocumentParameters",
                   "ssm:GetParametersByPath",
                   "ssm:GetParameters",
                   "ssm:GetParameter",
                   "ssm:DeleteParameters",
                   "s3:get*",
                   "s3:List*",
                   "imagebuilder:GetComponent"
               ],
               "Resource": "*"
           }
       ]
   }