Amazon Message Gateway Service (ssmmessages)

Additions

Resources

• session
  
  • Arn:  arn:${Partition}:ssm:${Region}:${Account}:session/${SessionId}
  • Conditions: 

    ssm:resourceTag/aws:ssmmessages:session-id

    ssm:resourceTag/aws:ssmmessages:target-id

Conditions

• ssm:resourceTag/aws:ssmmessages:session-id
  
  • Description:  Filters access by the user ID of the principal that started the session, as recorded in the AWS-supplied aws:ssmmessages:session-id tag
  • Type:  String
• ssm:resourceTag/aws:ssmmessages:target-id
  
  • Description:  Filters access by the ID of the managed node that the session connects to, as recorded in the AWS-supplied aws:ssmmessages:target-id tag
  • Type:  String

Updates

Actions

• OpenDataChannel
  
  Resources
  
  • ＋ session