aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap

Modifying Permissions of an AWS::SSM::Document

Open
#1,217 3 comments 11 reactions 0 assignees View on GitHub
enhancement
Dominant language
No language data
Stars
1.1k
Forks
62
PR merge metrics
No merged PRs in 30d

Description

### Name of the resource

AWS::SSM::Document

### Resource name

_No response_

### Description

Currently it's not possible to [modify the permissions](https://docs.aws.amazon.com/systems-manager/latest/userguide/ssm-share-modify.html) of an SSM document created via CloudFormation. This is only possible using the AWS CLI or the Management Console. The resource-type needs to support an additional parameter `Permissions` that allows a user to specify the permissions to attach to the document. This is currently supported using [Terraform](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ssm_document).

**API:** [ModifyDocumentPermission](https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ModifyDocumentPermission.html)

### Other Details

_No response_

Contributor guide

Open the contributing guide

Research direction

Start with the AWS::SSM::Document resource context and the linked ModifyDocumentPermission API documentation, then compare how Terraform exposes SSM document permissions. Done means the resource accepts a Permissions parameter and applies the requested document permissions through CloudFormation.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud, infrastructure
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.