Update SSM Permissions to not use AWS' Managed Policy

AWS' managed SSM Policy is a bit too permissive so I've updated the iam policies accordingly

v0.2.0 - Add SSM support

Adds SSM support and makes it the default, enables exclusion of SSH Keypairs and removes the default creation of one

v0.1.0

Initial setup