WS-2023-0308

The provided Minimal IAM Policy for "bastic connect" does not include "ssm:SessionDocumentAccessCheck". This results in the ability to get a shell session on the bastion, not just the intended access for Port Forwarding...