Status: IN
The AWSFaultInjectionSimulatorSSMAccess policy scopes `iam:PassRole` with a condition restricting it to `"iam:PassedToService": "ssm.amazonaws.com"` only.
Source: entries/2026/03/12/aws-managed-policy-latest-reference-AWSFaultInjectionSimulatorSSMAccesshtml.md