Quick cloudformation SSM work -- 2

I need an addition to an existing cloudformation template, that adds a patching schedule based on a tag Check if an instance has the SSM agent installed Tag it as “SSM-MANAGED” Make sure that the instance has a role on it that has permissions for SSM Create a Patch Management – new feature in Systems Manager ([login to view URL]) that gets applied by tag I’ll supply the existing CFT