AWS SSM Resource Policy for OpsCenter

This template creates resources needed for a member account to work with OpsCenter OpsItems across multiple accounts. It creates an AWS::SSM::ResourcePolicy and an AWS::IAM::Role. The resource policy allows specified AWS Organizations management or delegated administrator account IDs to access OpsItems and perform actions such as creating, updating, and getting OpsItems. The IAM role is used by the management account or delegated administrator to remediate OpsItems.