Amazon EC2 Systems Manager requires an IAM role for EC2 instances that will process commands and a separate role for users executing those commands. Learn more at – http://amzn.to/2xwvR3B. Both roles require permission policies that enable them to communicate with the Systems Manager.
In this video, we will show how to use Systems Manager managed policies or create your own roles and specify permissions.
Publisher: Amazon Web Services
You can watch this video also at the source.