ec2-instance-connect:SendSSHPublicKey is a Write access-level action in the ec2-instance-connect service. Grants permission to push an SSH public key to the specified EC2 instance to be used for standard SSH
ARNs that ec2-instance-connect:SendSSHPublicKey can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants ec2-instance-connect:SendSSHPublicKey.
Filters access by specifying the default user name for the AMI that you used to launch your instance
Filters access by tags associated with the resource
Filters access by tags associated with the resource
A minimal policy that allows ec2-instance-connect:SendSSHPublicKey. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEc2instanceconnectSendSSHPublicKey",
"Effect": "Allow",
"Action": "ec2-instance-connect:SendSSHPublicKey",
"Resource": "*"
}
]
}