Amazon EC2 (ec2)

2026-08-20

14 new actions, 1 new resource | 3 updated actions

Additions

    Actions
  • AssociateApplicationStatusCheck
    • Description:  Grants permission to associate an application status check with instances or tags
    • Access:  Write
    • Resources: 

      Name: application-status-check

      Required: Yes

      Name: instance

      Required: No

    • Conditions: 

      ec2:Region
  • CreateApplicationStatusCheck
    • Description:  Grants permission to create an application status check for monitoring the health of applications running on instances
    • Access:  Write
    • Resources: 

      Name: application-status-check

      Required: Yes

      Name: security-group

      Required: No

      Name: subnet

      Required: No

    • Conditions: 

      ec2:Region
  • CreateTransitGatewayPolicyTableEntry
    • Description:  Grants permission to create an entry in a transit gateway policy table
    • Access:  Write
    • Resources: 

      Name: transit-gateway-policy-table

      Required: Yes

      Name: transit-gateway-route-table

      Required: Yes

    • Conditions: 

      ec2:Region
  • DeleteApplicationStatusCheck
    • Description:  Grants permission to delete an application status check
    • Access:  Write
    • Resources: 

      Name: application-status-check

      Required: Yes

    • Conditions: 

      ec2:Region
  • DeleteTransitGatewayPolicyTableEntry
    • Description:  Grants permission to delete an entry from a transit gateway policy table
    • Access:  Write
    • Resources: 

      Name: transit-gateway-policy-table

      Required: Yes

    • Conditions: 

      ec2:Region
  • DescribeApplicationStatus
    • Description:  Grants permission to describe the aggregated application health status for instances
    • Access:  List
    • Conditions: 

      ec2:Region
  • DescribeApplicationStatusCheckAssociations
    • Description:  Grants permission to describe the associations for one or more application status checks
    • Access:  List
    • Conditions: 

      ec2:Region
  • DescribeApplicationStatusChecks
    • Description:  Grants permission to describe application status checks
    • Access:  List
    • Conditions: 

      ec2:Region
  • DisableApplicationStatusCheckSuppression
    • Description:  Grants permission to disable suppression of application status checks for instances
    • Access:  Write
    • Resources: 

      Name: instance

      Required: No

    • Conditions: 

      ec2:Region
  • DisassociateApplicationStatusCheck
    • Description:  Grants permission to disassociate an application status check from instances or tags
    • Access:  Write
    • Resources: 

      Name: application-status-check

      Required: Yes

      Name: instance

      Required: No

    • Conditions: 

      ec2:Region
  • EnableApplicationStatusCheckSuppression
    • Description:  Grants permission to suppress application status checks for instances
    • Access:  Write
    • Resources: 

      Name: instance

      Required: No

    • Conditions: 

      ec2:Region
  • ModifyApplicationStatusCheck
    • Description:  Grants permission to modify an application status check
    • Access:  Write
    • Resources: 

      Name: application-status-check

      Required: Yes

      Name: security-group

      Required: No

      Name: subnet

      Required: No

    • Conditions: 

      ec2:Region
  • ModifyTransitGatewayPolicyTableEntry
    • Description:  Grants permission to modify a transit gateway policy table entry
    • Access:  Write
    • Resources: 

      Name: transit-gateway-policy-table

      Required: Yes

      Name: transit-gateway-route-table

      Required: No

    • Conditions: 

      ec2:Region
  • ModifyVpcEndpointPayerResponsibility
    • Description:  Grants permission to modify the payer responsibility for a VPC endpoint
    • Access:  Write
    • Resources: 

      Name: vpc-endpoint-service

      Required: No

    • Conditions: 

      ec2:Region
    Resources
  • application-status-check
    • Arn:  arn:${Partition}:ec2:${Region}:${Account}:application-status-check/${ApplicationStatusCheckId}
    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:ResourceTag/${TagKey}

      aws:TagKeys

      ec2:Attribute

      ec2:Attribute/${AttributeName}

      ec2:Region

      ec2:ResourceTag/${TagKey}

Updates