Figure 6: If you drill down into the managed policy, you can see the SSM tasks that are allowed to run.
