aws ssm modify-document-permission
Shares a Systems Manager document publicly or privately. If you share a document privately, you must specify the AWS user account IDs for those people who can use the document. If you share a document publicly, you must specify All as the account ID
Options
| Name | Description |
|---|---|
--name <string> | The name of the document that you want to share |
--permission-type <string> | The permission type for the document. The permission type can be Share |
--account-ids-to-add <list> | The AWS user accounts that should have access to the document. The account IDs can either be a group of account IDs or All |
--account-ids-to-remove <list> | The AWS user accounts that should no longer have access to the document. The AWS user account can either be a group of account IDs or All. This action has a higher priority than AccountIdsToAdd. If you specify an account ID to add and the same ID to remove, the system removes access to the document |
--shared-document-version <string> | (Optional) The version of the document to share. If it's not specified, the system choose the Default version to share |
--cli-input-json <string> | Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally |
--generate-cli-skeleton <string> | Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command |