Amazon EC2 (ec2)

2022-07-23

10 new actions, 2 new resources | 30 updated actions, 6 updated resources

Additions

    Actions
  • AssociateTransitGatewayPolicyTable
    • Description:  Grants permission to associate a policy table with a transit gateway attachment
    • Access:  Write
    • Resources: 

      Name: transit-gateway-attachment

      Required: Yes

      Name: transit-gateway-policy-table

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      ec2:ResourceTag/${TagKey}

      ec2:Region
  • CreateTransitGatewayPolicyTable
    • Description:  Grants permission to create a transit gateway policy table
    • Access:  Write
    • Resources: 

      Name: transit-gateway

      Required: Yes

      Name: transit-gateway-policy-table

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      ec2:ResourceTag/${TagKey}

      aws:RequestTag/${TagKey}

      aws:TagKeys

      ec2:Region
    • Dependents: 

      ec2:CreateTags
  • CreateTransitGatewayRouteTableAnnouncement
    • Description:  Grants permission to create an announcement for a transit gateway route table
    • Access:  Write
    • Resources: 

      Name: transit-gateway-attachment

      Required: Yes

      Name: transit-gateway-route-table

      Required: Yes

      Name: transit-gateway-route-table-announcement

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      ec2:ResourceTag/${TagKey}

      aws:RequestTag/${TagKey}

      aws:TagKeys

      ec2:Region
    • Dependents: 

      ec2:CreateTags
  • DeleteTransitGatewayPolicyTable
    • Description:  Grants permission to delete a transit gateway policy table
    • Access:  Write
    • Resources: 

      Name: transit-gateway-policy-table

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      ec2:ResourceTag/${TagKey}

      ec2:Region
  • DeleteTransitGatewayRouteTableAnnouncement
    • Description:  Grants permission to delete a transit gateway route table announcement
    • Access:  Write
    • Resources: 

      Name: transit-gateway-route-table-announcement

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      ec2:ResourceTag/${TagKey}

      ec2:Region
  • DescribeTransitGatewayPolicyTables
    • Description:  Grants permission to describe a transit gateway policy table
    • Access:  Write
    • Conditions: 

      ec2:Region
  • DescribeTransitGatewayRouteTableAnnouncements
    • Description:  Grants permission to describe a transit gateway route table announcement
    • Access:  Write
    • Conditions: 

      ec2:Region
  • DisassociateTransitGatewayPolicyTable
    • Description:  Grants permission to disassociate a policy table from a transit gateway
    • Access:  Write
    • Resources: 

      Name: transit-gateway-attachment

      Required: Yes

      Name: transit-gateway-policy-table

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      ec2:ResourceTag/${TagKey}

      ec2:Region
  • GetTransitGatewayPolicyTableAssociations
    • Description:  Grants permission to get information about associations for a transit gateway policy table
    • Access:  List
    • Resources: 

      Name: transit-gateway-policy-table

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      ec2:ResourceTag/${TagKey}

      ec2:Region
  • GetTransitGatewayPolicyTableEntries
    • Description:  Grants permission to get information about associations for a transit gateway policy table entry
    • Access:  List
    • Resources: 

      Name: transit-gateway-policy-table

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      ec2:ResourceTag/${TagKey}

      ec2:Region
    Resources
  • transit-gateway-policy-table
    • Arn:  arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-policy-table/${TransitGatewayPolicyTableId}
    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:ResourceTag/${TagKey}

      aws:TagKeys

      ec2:Region

      ec2:ResourceTag/${TagKey}
  • transit-gateway-route-table-announcement
    • Arn:  arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table-announcement/${TransitGatewayRouteTableAnnouncementId}
    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:ResourceTag/${TagKey}

      aws:TagKeys

      ec2:Region

      ec2:ResourceTag/${TagKey}

Updates