apprunner:CreateVpcIngressConnection is a Write access-level action in the apprunner service. Grants permission to create an AWS App Runner VpcIngressConnection resource
ARNs that apprunner:CreateVpcIngressConnection can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants apprunner:CreateVpcIngressConnection.
Filters access by the CreateVpcIngressConnection action based on the ARN of an associated Service resource
Filters access by the CreateVpcIngressConnection and UpdateVpcIngressConnection actions based on the VPC Endpoint in the request
Filters access by the CreateVpcIngressConnection and UpdateVpcIngressConnection actions based on the VPC in the request
Filters access by actions based on the presence of tag key-value pairs in the request
Filters access by actions based on the presence of tag keys in the request
Filters access by actions based on tag key-value pairs attached to the resource
A minimal policy that allows apprunner:CreateVpcIngressConnection. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowApprunnerCreateVpcIngressConnection",
"Effect": "Allow",
"Action": "apprunner:CreateVpcIngressConnection",
"Resource": "*"
}
]
}