AWS::SSMQuickSetup::LifecycleAutomation

SSMQuickSetup LifecycleAutomation

Resource Type definition for AWS::SSMQuickSetup::LifecycleAutomation that executes SSM Automation documents in response to CloudFormation lifecycle events.

Properties

4 configurable properties. 3 required. Click a row to see details.

Filter:

Property	Type	Flags
`AutomationDocument`	`string`	Required
`AutomationParameters`	`AutomationParameters`	Required
`ResourceKey`	`string`	RequiredCreate-only
`Tags`	`TagsMap`

Return Values

Values returned after the resource is created. Access these with Fn::GetAtt.

Attribute	Type	Description
`AssociationId`	`string`	The id from the association that is returned when creating the association

Sample CloudFormation Template

A minimal template with required properties and common optional ones.

template.yaml

AWSTemplateFormatVersion: "2010-09-09"
Description: Sample template for AWS::SSMQuickSetup::LifecycleAutomation

Resources:
  MyResource:
    Type: AWS::SSMQuickSetup::LifecycleAutomation
    Properties:
      AutomationDocument: "value"
      ResourceKey: "value"
      AutomationParameters: "value"
      Tags:
        - Key: Environment
          Value: Production

Required IAM Permissions

Permissions CloudFormation needs in your IAM role to manage this resource.

create

ssm:CreateAssociationssm:DescribeAssociationssm:DescribeAssociationExecutionsssm:DescribeAssociationExecutionTargetsssm:GetAutomationExecutionssm:AddTagsToResourcessm:ListTagsForResourceiam:PassRole

read

ssm:DescribeAssociationssm:ListTagsForResource

update

ssm:DescribeAssociationssm:UpdateAssociationssm:DescribeAssociationExecutionsssm:DescribeAssociationExecutionTargetsssm:GetAutomationExecutionssm:AddTagsToResourcessm:RemoveTagsFromResourcessm:ListTagsForResource

delete

ssm:DeleteAssociationssm:UpdateAssociationssm:DescribeAssociationssm:DescribeAssociationExecutionsssm:DescribeAssociationExecutionTargetsssm:GetAutomationExecutioniam:PassRole