ec2:EnableIpamOrganizationAdminAccount is a Write access-level action in the ec2 service. Grants permission to enable an AWS Organizations member account as an Amazon VPC IP Address Manager (IPAM) admin account
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
To use ec2:EnableIpamOrganizationAdminAccount you may also need to grant:
A minimal policy that allows ec2:EnableIpamOrganizationAdminAccount. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEc2EnableIpamOrganizationAdminAccount",
"Effect": "Allow",
"Action": "ec2:EnableIpamOrganizationAdminAccount",
"Resource": "*"
}
]
}