Passwordless SUDO from ssm-user no longer supported

[DarwinJS]

One of our SAs discovered that you can no longer sudo from ssm-user without a password.

This complicates installing docker for the GItLab scenarios I use this for.

Is it worth adding a parameter for bastion host to reenable this?

https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-getting-started-ssm-user-permissions.html