{
"Version": "2012-10-17",
"Statement": [
    {
        "Sid": "AllowAccessToSSM",
        "Effect": "Allow",
        "Action": [
            "cloudwatch:PutMetricData",
            "logs:CreateLogGroup",
            "logs:CreateLogStream",
            "logs:DescribeLogGroups",
            "logs:DescribeLogStreams",
            "logs:PutLogEvents"
        ],
        "Resource": [
            "*"
        ]
    }
  ]
}