CODEWITHSUNDEEP
amazon-web-servicesamazon-ec2amazon-amiec2-ami
Tmm
Tmm

Reputation: 3

How to restrict AMI user to see EC2 instance on AWS

I want to make an account to external consultant to help us with AWS, but I want to allow him to only see certain EC2 instances instead of all.

I've read AWS documents/blogs about AMI and policies setting. I'm aware "describe" action can not have resource level permissions.

Is there any workaround to this? or we really need to let external consultant see all the instances' information?

Upvotes: 0

Views: 195

Answers (1)

omar.khairat
omar.khairat

Reputation: 117

this is currently not possible as many EC2 actions do not support resource-level permissions. check the answer to this question on their knowledge center site, and here I am quoting.

This is not currently possible for all API actions within EC2, but it is for some. Many essential EC2 actions do not support resource-level permissions or conditions, and isolating IAM users or groups of users’ access to EC2 resources by any criteria other than AWS region does not fit most use cases

Upvotes: 1

Related Questions