Why does a human IAM role have SSM message-channel permissions?
I'm reviewing an IAM role named xyz that will be assumed by a user. It includes ssmmessages:CreateDataChannel, ssmmessages:OpenDataChannel, and ssmmessages:CreateControlChannel, with Resource set to * and an IP-based…