autoscaling:CreateLaunchConfiguration is a Write access-level action in the autoscaling service. Grants permission to create a launch configuration
ARNs that autoscaling:CreateLaunchConfiguration can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants autoscaling:CreateLaunchConfiguration.
Filters access based on the AMI ID for the launch configuration
Filters access based on the instance type for the launch configuration
Filters access based on whether the HTTP endpoint is enabled for the instance metadata service
Filters access based on the allowed number of hops when calling the instance metadata service
Filters access based on whether tokens are required when calling the instance metadata service (optional or required)
Filters access based on the price for Spot Instances for the launch configuration
A minimal policy that allows autoscaling:CreateLaunchConfiguration. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowAutoscalingCreateLaunchConfiguration",
"Effect": "Allow",
"Action": "autoscaling:CreateLaunchConfiguration",
"Resource": "*"
}
]
}