autoscaling:CreateAutoScalingGroup

Write

autoscaling:CreateAutoScalingGroup is a Write access-level action in the autoscaling service. Grants permission to create an Auto Scaling group with the specified name and attributes

Resource types

ARNs that autoscaling:CreateAutoScalingGroup can be scoped to in an IAM policy.

arn:${Partition}:autoscaling:${Region}:${Account}:autoScalingGroup:${GroupId}:autoScalingGroupName/${GroupFriendlyName} required
autoScalingGroup

Condition keys

Keys you can use in the Condition block of a policy that grants autoscaling:CreateAutoScalingGroup.

autoscaling:CapacityReservationIds ArrayOfString

Filters access based on the Capacity Reservation IDs

autoscaling:CapacityReservationResourceGroupArns ArrayOfString

Filters access based on the ARN of a Capacity Reservation resource group

autoscaling:ImageId String

Filters access based on the AMI ID for the launch configuration

autoscaling:InstanceTypes String

Filters access based on the instance types present as overrides to a launch template for a mixed instances policy. Use it to qualify which instance types can be explicitly defined in the policy

autoscaling:LaunchConfigurationName String

Filters access based on the name of a launch configuration

autoscaling:LaunchTemplateVersionSpecified Bool

Filters access based on whether users can specify any version of a launch template or only the Latest or Default version

autoscaling:LoadBalancerNames ArrayOfString

Filters access based on the name of the load balancer

autoscaling:MaxSize Numeric

Filters access based on the maximum scaling size in the request

autoscaling:MinSize Numeric

Filters access based on the minimum scaling size in the request

autoscaling:OperatorPrincipal String

Filters access based on the the operator for EC2 Managed Instances

autoscaling:TargetCapacityTypes ArrayOfString

Filters access based on the target capacity types present in the distribution segments of a mixed instances policy. Use it to qualify which capacity types can be explicitly defined in the policy

autoscaling:TargetGroupARNs ArrayOfARN

Filters access based on the ARN of a target group

autoscaling:TrafficSourceIdentifiers ArrayOfString

Filters access based on the identifiers of the traffic sources

autoscaling:VPCZoneIdentifiers ArrayOfString

Filters access based on the identifier of a VPC zone

aws:RequestTag/${TagKey} String

Filters access based on the tags that are passed in the request

aws:TagKeys ArrayOfString

Filters access based on the tag keys that are passed in the request

autoscaling:ResourceTag/${TagKey} String

Filters access based on the tags associated with the resource

aws:ResourceTag/${TagKey} String

Filters access based on the tags associated with the resource

Example IAM policy

A minimal policy that allows autoscaling:CreateAutoScalingGroup. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowAutoscalingCreateAutoScalingGroup",
      "Effect": "Allow",
      "Action": "autoscaling:CreateAutoScalingGroup",
      "Resource": "*"
    }
  ]
}

Related actions in autoscaling

View all autoscaling actions →