An IAM policy which grants the necessary permissions to run the SSM agent and the AWS SSM Session Manager.