{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "",
            "Effect": "Allow",
            "Action": [
                "ssm:ListInventoryEntries",
                "ec2:Describe*",
                "autoscaling:Describe*",
                "ssm:ListCommands",
                "ssm:DescribeParameters",
                "route53:ChangeResourceRecordSets",
                "ssm:ListDocuments",
                "ssm:GetInventory"
            ],
            "Resource": "*"
        },
        {
            "Sid": "",
            "Effect": "Allow",
            "Action": [
                "ssm:GetDocument",
                "ssm:GetParameters",
                "ssm:GetParameter"
            ],
            "Resource": [
                "arn:aws:ssm:${region}:*:document/*",
                "arn:aws:ssm:${region}:*:parameter/*",
            ]
        },
        {
            "Sid": "",
            "Effect": "Allow",
            "Action": "cloudwatch:*",
            "Resource": "*"
        },
        {
            "Sid": "",
            "Effect": "Allow",
            "Action": "logs:*",
            "Resource": "*"
        }
    ]
}