ec2-instance-connect:OpenTunnel is a Write access-level action in the ec2-instance-connect service. Grants permission to establish SSH connection to an EC2 instance using EC2 Instance Connect Endpoint
ARNs that ec2-instance-connect:OpenTunnel can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants ec2-instance-connect:OpenTunnel.
Filters access by tags associated with the resource
Filters access by tags associated with the resource
Filters access by private IP Address associated with the instance
Filters access by port number associated with the instance
A minimal policy that allows ec2-instance-connect:OpenTunnel. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEc2instanceconnectOpenTunnel",
"Effect": "Allow",
"Action": "ec2-instance-connect:OpenTunnel",
"Resource": "*"
}
]
}