ec2:ApplySecurityGroupsToClientVpnTargetNetwork is a Write access-level action in the ec2 service. Grants permission to apply a security group to the association between a Client VPN endpoint and a target network
ARNs that ec2:ApplySecurityGroupsToClientVpnTargetNetwork can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants ec2:ApplySecurityGroupsToClientVpnTargetNetwork.
Filters access by the name of the AWS Region
Filters access by a tag key and value pair of a resource
Filters access by the ARN of the client root certificate chain
Filters access by the ARN of the CloudWatch Logs log group
Filters access by the ARN of the CloudWatch Logs log stream
Filters access by the ARN of the directory
Filters access by a tag key and value pair of a resource
Filters access by the ARN of the IAM SAML identity provider
Filters access by the ARN of the server certificate
Filters access by the ID of a security group
Filters access by the ARN of the VPC
Filters access by the tenancy of the VPC or instance (default, dedicated, or host)
Filters access by the ID of a virtual private cloud (VPC)
A minimal policy that allows ec2:ApplySecurityGroupsToClientVpnTargetNetwork. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEc2ApplySecurityGroupsToClientVpnTargetNetwork",
"Effect": "Allow",
"Action": "ec2:ApplySecurityGroupsToClientVpnTargetNetwork",
"Resource": "*"
}
]
}