module1/cloudcustodian-memberrole.yml [23:36]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  CloudCustodianPolicyActions:
    Type: AWS::IAM::ManagedPolicy
    Properties:
      Description: "IAM Actions required to execute to Actions part of a CloudCustodian policies"
      PolicyDocument:
        Version: "2012-10-17"
        Statement:
          -
            Sid: "CCPolicyActionExecution"
            Effect: "Allow"
            Action:
              - "ssm:SendCommand"
              - "ssm:ListCommands"
              - "ssm:CreateOpsItem"
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



module1/securityhub-remediations-workshop.yml [421:434]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  CloudCustodianPolicyActions:
    Type: AWS::IAM::ManagedPolicy
    Properties:
      Description: "IAM Actions required to execute to Actions part of a CloudCustodian policies"
      PolicyDocument:
        Version: "2012-10-17"
        Statement:
          -
            Sid: "CCPolicyActionExecution"
            Effect: "Allow"
            Action:
              - "ssm:SendCommand"
              - "ssm:ListCommands"
              - "ssm:CreateOpsItem"
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



