Setting up Change Calendar - Amazon Systems Manager
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China.

Setting up Change Calendar

Complete the following before using Change Calendar, a capability of Amazon Systems Manager.

Install latest command line tools

Install the latest command line tools to get state information about calendars.

Requirement Description

Amazon CLI

(Optional) To use the Amazon Command Line Interface (Amazon CLI) to get state information about calendars, install the newest release of the Amazon CLI on your local computer.

For more information about how to install or upgrade the CLI, see Installing, updating, and uninstalling the Amazon CLI in the Amazon Command Line Interface User Guide.

Amazon Tools for PowerShell

(Optional) To use the Tools for PowerShell to get state information about calendars, install the newest release of Tools for PowerShell on your local computer.

For more information about how to install or upgrade the Tools for PowerShell, see Installing the Amazon Tools for PowerShell in the Amazon Tools for PowerShell User Guide.

Set up permissions

To create, update, or delete a Change Calendar entry, including adding and removing events from the entry, a policy attached to your Amazon Identity and Access Management (IAM) user or service role must allow the following actions:

  • ssm:CreateDocument

  • ssm:DeleteDocument

  • ssm:DescribeDocument

  • ssm:DescribeDocumentPermission

  • ssm:GetCalendar

  • ssm:ListDocuments

  • ssm:ModifyDocumentPermission

  • ssm:PutCalendar

  • ssm:UpdateDocument

  • ssm:UpdateDocumentDefaultVersion

To get information about the current or upcoming state of the calendar, a policy attached to your IAM user or service role must allow the following action:

  • ssm:GetCalendarState

If your IAM user account, group, or role is assigned administrator permissions, then you have access to Change Calendar. If you don't have administrator permissions, then an administrator must give you permission by assigning the AmazonSSMFullAccess managed policy, or a policy that provides comparable permissions, to your IAM account, group, or role.

Change Calendar entries that are owned by (that is, created by) accounts other than yours are read-only, even if they're shared with your account.