Amazon EC2 (ec2)

Additions

Actions

• AcceptAddressTransfer
  
  • Description:  Grants permission to accept an Elastic IP address transfer
  • Access:  Write
  • Resources: 

    Name: elastic-ip

    Required: Yes

  • Conditions: 

    ec2:AllocationId

    ec2:Domain

    ec2:PublicIpAddress

    aws:RequestTag/${TagKey}

    aws:TagKeys

    ec2:Region

  • Dependents: 

    ec2:CreateTags

• CancelImageLaunchPermission
  
  • Description:  Grants permission to remove your AWS account from the launch permissions for the specified AMI
  • Access:  Write
  • Resources: 

    Name: image

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

    ec2:ImageID

    ec2:ImageType

    ec2:Owner

    ec2:Public

    ec2:ResourceTag/${TagKey}

    ec2:RootDeviceType

    ec2:Region

• DescribeAddressTransfers
  
  • Description:  Grants permission to describe an Elastic IP address transfer
  • Access:  List
  • Conditions: 

    ec2:Region

• DisableAddressTransfer
  
  • Description:  Grants permission to disable Elastic IP address transfer
  • Access:  Write
  • Resources: 

    Name: elastic-ip

    Required: No

  • Conditions: 

    aws:ResourceTag/${TagKey}

    ec2:AllocationId

    ec2:Domain

    ec2:PublicIpAddress

    ec2:ResourceTag/${TagKey}

    ec2:Region

• EnableAddressTransfer
  
  • Description:  Grants permission to enable Elastic IP address transfer
  • Access:  Write
  • Resources: 

    Name: elastic-ip

    Required: No

  • Conditions: 

    aws:ResourceTag/${TagKey}

    ec2:AllocationId

    ec2:Domain

    ec2:PublicIpAddress

    ec2:ResourceTag/${TagKey}

    ec2:Region

Updates

Actions

• CreateCoipPoolPermission
  
  Conditions
  
  • ＋ aws:ResourceTag/${TagKey}
  • ＋ ec2:ResourceTag/${TagKey}
  Resources
  
  • ＋ coip-pool
• CreateReplaceRootVolumeTask
  
  Conditions
  
  • ＋ ec2:ImageID
  • ＋ ec2:ImageType
  • ＋ ec2:Public
  Resources
  
  • ＋ image
• CreateTransitGatewayVpcAttachment
  
  Resources
  

  • New_value: Yes

    Old_value: No

• DeleteCoipPoolPermission
  
  Conditions
  
  • ＋ aws:ResourceTag/${TagKey}
  • ＋ ec2:ResourceTag/${TagKey}
  Resources
  
  • ＋ coip-pool
• DeleteResourcePolicy
  
  Conditions
  
  • ＋ ec2:PlacementGroupName
  • ＋ ec2:PlacementGroupStrategy
  Resources
  
  • ＋ placement-group
• DisassociateRouteTable
  
  Conditions
  
  • ＋ ec2:InternetGatewayID
  Resources
  
  • ＋ internet-gateway
  • ＋ vpn-gateway
• GetResourcePolicy
  
  Conditions
  
  • ＋ ec2:PlacementGroupName
  • ＋ ec2:PlacementGroupStrategy
  Resources
  
  • ＋ placement-group
• PutResourcePolicy
  
  Conditions
  
  • ＋ ec2:PlacementGroupName
  • ＋ ec2:PlacementGroupStrategy
  Resources
  
  • ＋ placement-group

Resources

• elastic-inference
  
  Arn
  
  • Old: arn:${Partition}:elastic-inference:${Region}:${Account}:elastic-inference-accelerator/${ElasticInferenceAcceleratorId}
    New: arn:${Partition}:elastic-inference:${Region}:${Account}:elastic-inference-accelerator/${AcceleratorId}
• license-configuration
  
  Arn
  
  • Old: arn:${Partition}:license-manager:${Region}:${Account}:license-configuration/${LicenseConfigurationId}
    New: arn:${Partition}:license-manager:${Region}:${Account}:license-configuration:${LicenseConfigurationId}