ansible/files/aws/iam/policies/fcos-upload-amis.json
Dusty Mabe 803e4c9ffc
aws-iam-policies: fcos-upload-amis: add ability to cancel snapshot import
We had an import snapshot task get stuck and we don't have permission to
cancel it. This will enable us to run something like:

```
aws ec2 cancel-import-task --import-task-id import-snap-071b6e456e60146b7
```
2022-03-15 10:05:07 -04:00

43 lines
1.3 KiB
JSON

{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "VisualEditor0",
"Effect": "Allow",
"Action": [
"ec2:ImportVolume",
"ec2:CreateTags",
"ec2:RegisterImage",
"ec2:DeregisterImage",
"ec2:CancelConversionTask",
"ec2:CreateSnapshot",
"ec2:ImportSnapshot",
"ec2:CancelImportTask",
"ec2:DeleteSnapshot",
"ec2:CopyImage",
"ec2:DescribeImageAttribute",
"ec2:ModifyImageAttribute",
"ec2:DescribeSnapshots",
"ec2:DescribeSnapshotAttribute",
"ec2:DescribeImportSnapshotTasks",
"ec2:DescribeImages",
"ec2:DeleteVolume",
"ec2:ModifySnapshotAttribute",
"ec2:DescribeAvailabilityZones",
"ec2:DescribeVolumes",
"ec2:DescribeRegions",
"ec2:DescribeConversionTasks"
],
"Resource": "*"
},
{
"Sid": "VisualEditor1",
"Effect": "Allow",
"Action": "ec2:CreateTags",
"Resource": [
"arn:aws:ec2:*::snapshot/*",
"arn:aws:ec2:*::image/*"
]
}
]
}