aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap
Modifying Permissions of an AWS::SSM::Document
- Dominant language
- No language data
- Stars
- 1.1k
- Forks
- 62
- PR merge metrics
- No merged PRs in 30d
Description
### Name of the resource
AWS::SSM::Document
### Resource name
_No response_
### Description
Currently it's not possible to [modify the permissions](https://docs.aws.amazon.com/systems-manager/latest/userguide/ssm-share-modify.html) of an SSM document created via CloudFormation. This is only possible using the AWS CLI or the Management Console. The resource-type needs to support an additional parameter `Permissions` that allows a user to specify the permissions to attach to the document. This is currently supported using [Terraform](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ssm_document).
**API:** [ModifyDocumentPermission](https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ModifyDocumentPermission.html)
### Other Details
_No response_
Contributor guide
Research direction
Start with the AWS::SSM::Document resource context and the linked ModifyDocumentPermission API documentation, then compare how Terraform exposes SSM document permissions. Done means the resource accepts a Permissions parameter and applies the requested document permissions through CloudFormation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws
- Domain
- cloud, infrastructure
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100