xdr-terraform-modules/thirdparty/terraform-aws-github-runner/modules/runners/policies/instance-ssm-parameters-policy.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "ssm:DeleteParameter"
      ],
      "Resource": "${arn_ssm_parameters_prefix}"
    },
    {
      "Effect": "Allow",
      "Action": [
        "ssm:GetParameter",
        "ssm:GetParameters",
        "ssm:GetParametersByPath"
      ],
      "Resource": [
        "${arn_ssm_parameters_prefix}",
        "${arn_ssm_parameters_path}"
      ]      
    }
  ]
}