Amazon EC2 (ec2)

Additions

Actions

• ModifyInstanceMaintenanceOptions
  
  • Description:  Grants permission to modify the recovery behaviour for an instance
  • Access:  Write
  • Resources: 

    Name: instance

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

    ec2:Attribute

    ec2:Attribute/${AttributeName}

    ec2:AvailabilityZone

    ec2:EbsOptimized

    ec2:InstanceAutoRecovery

    ec2:InstanceID

    ec2:InstanceMarketType

    ec2:InstanceMetadataTags

    ec2:InstanceProfile

    ec2:InstanceType

    ec2:MetadataHttpEndpoint

    ec2:MetadataHttpPutResponseHopLimit

    ec2:MetadataHttpTokens

    ec2:PlacementGroup

    ec2:ResourceTag/${TagKey}

    ec2:RootDeviceType

    ec2:Tenancy

    ec2:Region

Updates

Actions

• AuthorizeSecurityGroupEgress
  
  Conditions
  
  • ＋ aws:RequestTag/${TagKey}
  • ＋ aws:TagKeys
  Resources
  
  • ＋ security-group-rule
• AuthorizeSecurityGroupIngress
  
  Conditions
  
  • ＋ aws:RequestTag/${TagKey}
  • ＋ aws:TagKeys
  Resources
  
  • ＋ security-group-rule
• StartNetworkInsightsAccessScopeAnalysis
  
  Conditions
  
  • ＋ aws:RequestTag/${TagKey}
  • ＋ aws:TagKeys
  Resources
  
  • ＋ network-insights-access-scope-analysis
• StartNetworkInsightsAnalysis
  
  Conditions
  
  • ＋ aws:RequestTag/${TagKey}
  • ＋ aws:TagKeys

Conditions

• aws:TagKeys
  
  Type
  
  • String  ⟶  ArrayOfString