Is Not Authorized To Perform Ssm Getparameter On Resource Aws, I also tried a policy statement with no wildcards, i. e. the only action was ssm:GetParameter and Resource was the specific ARN of my parameter. If the AWS Management Console tells you that you're not authorized to perform an action, then you must contact your administrator for assistance. Example: I had ssm:GetParameter, and the error message was AccessDeniedException: User is not authorized to perform: ssm:GetParameter In this article, we’ll demonstrate how to create an AWS Identity and Access Management (IAM) policy that grants access to the ssm:GetParameter action, allowing you to Fix AWS IAM authorization error 'Not authorized to perform: ssm:GetParameters' with proper permission configuration. Is there something I'm missing in terms of 'AccessDeniedException': User: is not authorized to perform: ssm:GetParameter on resource: because no identity-based policy allows the ssm:GetParameter action It appears that you need to specificly add - ssm:GetParameter action to your policy in order for this to work. It seem that aws documentation was not . Your administrator is the person that provided you Solution: You do not have all the permissions needed to create an EC2 instance using a parameter value, such as permissions for ec2:RunInstances, ec2:DescribeImages, and ssm:GetParameter, Lists all of the available service-specific resources, actions, and condition keys that can be used in IAM policies to control access to AWS Systems Manager. hw6b otqk mllgy5x amdt yk9sts lw3aqc usbb yxsk cvjl ekni