Add Helper Method for Configuring SSM

[horsmand]

It's very common to require access to a host in a render farm for troubleshooting. A simple way of connecting to a host is the AWS Systems Manager Session Manager. It would be nice to have a helper method that applies the required permissions for using Session Manager.

Use Case

An example of where this can be used is on a worker fleet that is having issues. I would like to be able to pass the worker fleet into the helper method and then be able to go into the AWS console and connect to the host using the Session Manager to be able to access the host from the browser without having to configure ssh keys and permissions.

Proposed Solution

A helper method that applies this policy:

new PolicyStatement(
    actions: [
        'ssmmessages:CreateControlChannel',
        'ssmmessages:CreateDataChannel',
        'ssmmessages:OpenControlChannel',
        'ssmmessages:OpenDataChannel',
        'ssm:UpdateInstanceInformation',
    ],
    resources: ['*']
)

• 👋 I may be able to implement this feature request
• ⚠️ This feature might incur a breaking change

---

This is a 🚀 Feature Request