Amazon EC2 (ec2)

2022-03-04

2 new actions, 2 new resources, 14 new conditions | 357 updated actions, 14 updated resources

Additions

    Actions
  • ListImagesInRecycleBin
    • Description:  Grants permission to list Amazon Machine Images (AMIs) that are currently in the Recycle Bin
    • Access:  List
    • Resources: 

      Name: image

      Required: No

    • Conditions: 

      aws:ResourceTag/${TagKey}

      ec2:ImageID

      ec2:ImageType

      ec2:Owner

      ec2:Public

      ec2:ResourceTag/${TagKey}

      ec2:RootDeviceType

      ec2:Region
  • RestoreImageFromRecycleBin
    • Description:  Grants permission to restore an Amazon Machine Image (AMI) from the Recycle Bin
    • Access:  Write
    • Resources: 

      Name: image

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      ec2:ImageID

      ec2:ImageType

      ec2:Owner

      ec2:Public

      ec2:ResourceTag/${TagKey}

      ec2:RootDeviceType

      ec2:Region
    Resources
  • license-configuration
    • Arn:  arn:${Partition}:license-manager:${Region}:${Account}:license-configuration/${LicenseConfigurationId}
  • subnet-cidr-reservation
    • Arn:  arn:${Partition}:ec2:${Region}:${Account}:subnet-cidr-reservation/${SubnetCidrReservationId}
    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:ResourceTag/${TagKey}

      aws:TagKeys

      ec2:Region

      ec2:ResourceTag/${TagKey}
    Conditions
  • ec2:DhcpOptionsID
    • Description:  Filters access by the ID of a dynamic host configuration protocol (DHCP) options set
    • Type:  String
  • ec2:ImageID
    • Description:  Filters access by the ID of an image
    • Type:  String
  • ec2:InstanceID
    • Description:  Filters access by the ID of an instance
    • Type:  String
  • ec2:InternetGatewayID
    • Description:  Filters access by the ID of an internet gateway
    • Type:  String
  • ec2:NetworkAclID
    • Description:  Filters access by the ID of a network access control list (ACL)
    • Type:  String
  • ec2:NetworkInterfaceID
    • Description:  Filters access by the ID of an elastic network interface
    • Type:  String
  • ec2:PlacementGroupName
    • Description:  Filters access by the name of a placement group
    • Type:  String
  • ec2:RouteTableID
    • Description:  Filters access by the ID of a route table
    • Type:  String
  • ec2:SecurityGroupID
    • Description:  Filters access by the ID of a security group
    • Type:  String
  • ec2:SnapshotID
    • Description:  Filters access by the ID of a snapshot
    • Type:  String
  • ec2:SubnetID
    • Description:  Filters access by the ID of a subnet
    • Type:  String
  • ec2:VolumeID
    • Description:  Filters access by the ID of a volume
    • Type:  String
  • ec2:VpcID
    • Description:  Filters access by the ID of a virtual private cloud (VPC)
    • Type:  String
  • ec2:VpcPeeringConnectionID
    • Description:  Filters access by the ID of a VPC peering connection
    • Type:  String

Updates