Amazon EC2 (ec2)

2025-08-27

6 new actions, 1 new resource | 82 updated actions, 3 updated resources

Additions

    Actions
  • CreateImageUsageReport
    • Description:  Grants permission to create an AMI usage report
    • Access:  Write
    • Resources: 

      Name: image

      Required: Yes

      Name: image-usage-report

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      ec2:ImageID

      ec2:ImageType

      ec2:Owner

      ec2:Public

      ec2:ResourceTag/${TagKey}

      ec2:RootDeviceType

      aws:RequestTag/${TagKey}

      aws:TagKeys

      ec2:Region
    • Dependents: 

      ec2:CreateTags
  • DeleteImageUsageReport
    • Description:  Grants permission to delete an AMI usage report
    • Access:  Write
    • Resources: 

      Name: image-usage-report

      Required: Yes

    • Conditions: 

      aws:ResourceTag/${TagKey}

      ec2:ResourceTag/${TagKey}

      ec2:Region
  • DescribeImageReferences
    • Description:  Grants permission to describe your AWS resources that are referencing specified images
    • Access:  List
    • Conditions: 

      ec2:Region
  • DescribeImageUsageReportEntries
    • Description:  Grants permission to describe the entries of an AMI usage report
    • Access:  List
    • Conditions: 

      ec2:Region
  • DescribeImageUsageReports
    • Description:  Grants permission to describe the configuration and status of an AMI usage report
    • Access:  List
    • Conditions: 

      ec2:Region
  • ModifyInstanceConnectEndpoint
    • Description:  Grants permission to modify an existing EC2 Instance Connect Endpoint
    • Access:  Write
    • Resources: 

      Name: instance-connect-endpoint

      Required: Yes

      Name: security-group

      Required: No

    • Conditions: 

      aws:ResourceTag/${TagKey}

      ec2:Attribute

      ec2:Attribute/${AttributeName}

      ec2:ResourceTag/${TagKey}

      ec2:SecurityGroupID

      ec2:Vpc

      ec2:Region
    Resources
  • image-usage-report
    • Arn:  arn:${Partition}:ec2:${Region}:${Account}:image-usage-report/${ImageUsageReportId}
    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:ResourceTag/${TagKey}

      aws:TagKeys

      ec2:Region

      ec2:ResourceTag/${TagKey}

Updates