Manage temporary_iam_instance_profile_policy_document for SSM config
- Dominant language
- Go
- Stars
- 15.8k
- Forks
- 3.3k
- PR merge metrics
- PR metrics pending
Description
#### Community Note
* Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request
* Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
* If you are interested in working on this issue or have submitted a pull request, please leave a comment
Please search the existing issues for relevant feature requests, and use the
reaction feature
(https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/)
to add upvotes to pre-existing requests.
#### Description
When the parameter for ssh_interface is set to "session_manager" we obvouslly admit that the SSM session is used.
The temporary_iam_instance_profile_policy_document can be created to attache some other references such as s3 bucket or secret_manager....
In my mind it could be a great things if the packer temporary role have the SSM Managed Core Policy attached by default in the case of SSM use case.
Could be a great option if we can use some existing policy in the accont.
#### Use Case(s)
If ssh_interface is set to "session_manager" so temporary_iam_instance_profile_policy_document have a temporary role with AmazonSSMManagedInstanceCore Policy attached.
#### Potential configuration
```
temporary_iam_instance_profile_policy_document use a JSON policy
temporary_iam_instance_profile_policies could a List[string] parameter with policies arns to attache on temporary role.
```
#### Potential References
Contributor guide
Assessment
This issue has not been assessed yet.