Add ssm:CreateDocument permission to the service role

Author: keithduncan

templates/service-role.yml

@@ -214,6 +214,13 @@ Resources:
               ],
               "Resource": "arn:aws:ssm:*:*:parameter/*"
             },
+            {
+              "Effect": "Allow",
+              "Action": [
+                "ssm:CreateDocument"
+              ],
+              "Resource": "*"
+            },
             {
               "Effect": "Allow",
               "Action": [