Amazon EC2 (ec2)

2026-11-10

8 new actions, 1 new resource, 2 new conditions | 2 updated resources, 1 updated action

Additions

    Actions
  • CreateCapacityReservationDateChangeQuote
    • Description:  Grants permission to generate a quote for changing the start date of a future-dated Capacity Reservation
    • Access:  Write
    • Resources: 

      Name: capacity-reservation

      Required: Yes

      Name: capacity-reservation-modification-quote

      Required: Yes

    • Conditions: 

      ec2:Region
  • DeleteClientVpnEndpointAuthorizationPolicy
    • Description:  Grants permission to delete the authorization policy for a Client VPN endpoint
    • Access:  Write
    • Resources: 

      Name: client-vpn-endpoint

      Required: Yes

    • Conditions: 

      ec2:Region
  • DescribeCapacityReservationDateChangeQuotes
    • Description:  Grants permission to describe one or more Capacity Reservation date change quotes
    • Access:  List
    • Conditions: 

      ec2:Region
  • GetClientVpnEndpointAuthorizationPolicy
    • Description:  Grants permission to describe the authorization policy for a Client VPN endpoint
    • Access:  Read
    • Resources: 

      Name: client-vpn-endpoint

      Required: Yes

    • Conditions: 

      ec2:Region
  • GetImageFindings
    • Description:  Grants permission to describe the Amazon Inspector vulnerability findings for an Amazon Machine Image (AMI)
    • Access:  Read
    • Resources: 

      Name: image

      Required: Yes

    • Conditions: 

      ec2:Region
  • GetTransitGatewayAttachmentNatConfiguration
    • Description:  Grants permission to describe the NAT configuration for a transit gateway attachment
    • Access:  Read
    • Resources: 

      Name: transit-gateway-attachment

      Required: Yes

    • Conditions: 

      ec2:Region
  • ModifyClientVpnEndpointAuthorizationPolicy
    • Description:  Grants permission to create or update the authorization policy for a Client VPN endpoint
    • Access:  Write
    • Resources: 

      Name: client-vpn-endpoint

      Required: Yes

    • Conditions: 

      ec2:Region
  • ModifyTransitGatewayAttachmentNatConfiguration
    • Description:  Grants permission to modify the NAT configuration for a transit gateway attachment
    • Access:  Write
    • Resources: 

      Name: transit-gateway-attachment

      Required: Yes

    • Conditions: 

      ec2:Region
    Resources
  • capacity-reservation-modification-quote
    • Arn:  arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation-modification-quote/${CapacityReservationModificationQuoteId}
    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:ResourceTag/${TagKey}

      aws:TagKeys

      ec2:Attribute

      ec2:Attribute/${AttributeName}

      ec2:Region

      ec2:ResourceTag/${TagKey}

Updates