Manage temporary_iam_instance_profile_policy_document for SSM config #13491

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Please search the existing issues for relevant feature requests, and use the
reaction feature
(https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/)
to add upvotes to pre-existing requests.

Description

When the parameter for ssh_interface is set to "session_manager" we obvouslly admit that the SSM session is used.
The temporary_iam_instance_profile_policy_document can be created to attache some other references such as s3 bucket or secret_manager....

In my mind it could be a great things if the packer temporary role have the SSM Managed Core Policy attached by default in the case of SSM use case.

Could be a great option if we can use some existing policy in the accont.

Use Case(s)

If ssh_interface is set to "session_manager" so temporary_iam_instance_profile_policy_document have a temporary role with AmazonSSMManagedInstanceCore Policy attached.

Potential configuration

temporary_iam_instance_profile_policy_document use a JSON policy
temporary_iam_instance_profile_policies could a List[string] parameter with policies arns to attache on temporary role. 

Potential References