Setting up Change Calendar - Amazon Systems Manager
Install latest command line toolsSet up permissions
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Setting up Change Calendar

Complete the following before using Change Calendar, a capability of Amazon Systems Manager.

Install latest command line tools

Install the latest command line tools to get state information about calendars.

Requirement Description

Amazon CLI

(Optional) To use the Amazon Command Line Interface (Amazon CLI) to get state information about calendars, install the newest release of the Amazon CLI on your local computer.

For more information about how to install or upgrade the CLI, see Installing, updating, and uninstalling the Amazon CLI in the Amazon Command Line Interface User Guide.

Amazon Tools for PowerShell

(Optional) To use the Tools for PowerShell to get state information about calendars, install the newest release of Tools for PowerShell on your local computer.

For more information about how to install or upgrade the Tools for PowerShell, see Installing the Amazon Tools for PowerShell in the Amazon Tools for PowerShell User Guide.

Set up permissions

If your user, group, or role is assigned administrator permissions, then you have full access to Change Calendar. If you don't have administrator permissions, then an administrator must give you permission by either assigning the AmazonSSMFullAccess managed policy, or assigning a policy that provides the necessary permissions to your user, group, or role.

The following permissions are required to work with Change Calendar.

Change Calendar entries

To create, update, or delete a Change Calendar entry, including adding and removing events from the entry, a policy attached to your user, group, or role must allow the following actions:

  • ssm:CreateDocument

  • ssm:DeleteDocument

  • ssm:DescribeDocument

  • ssm:DescribeDocumentPermission

  • ssm:GetCalendar

  • ssm:ListDocuments

  • ssm:ModifyDocumentPermission

  • ssm:PutCalendar

  • ssm:UpdateDocument

  • ssm:UpdateDocumentDefaultVersion

Calendar state

To get information about the current or upcoming state of the calendar, a policy attached to your user, group, or role must allow the following action:

  • ssm:GetCalendarState

Operational events

To view operational events, such as maintenance windows, associations, and planned automations, the policy attached to your user, group, or role must allow the following actions:

  • ssm:DescribeMaintenanceWindows

  • ssm:DescribeMaintenanceWindowExecution

  • ssm:DescribeAutomationExecutions

  • ssm:ListAssociations

Note

Change Calendar entries that are owned by (that is, created by) accounts other than yours are read-only, even if they're shared with your account.