autoscaling:StartInstanceRefresh is a Write access-level action in the autoscaling service. Grants permission to start a new instance refresh operation
ARNs that autoscaling:StartInstanceRefresh can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants autoscaling:StartInstanceRefresh.
Filters access based on the AMI ID for the launch configuration
Filters access based on the target capacity types present in the distribution segments of a mixed instances policy. Use it to qualify which capacity types can be explicitly defined in the policy
Filters access based on the tags associated with the resource
Filters access based on the tags associated with the resource
A minimal policy that allows autoscaling:StartInstanceRefresh. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowAutoscalingStartInstanceRefresh",
"Effect": "Allow",
"Action": "autoscaling:StartInstanceRefresh",
"Resource": "*"
}
]
}