ec2:GetImageBlockPublicAccessState is a Read access-level action in the ec2 service. Grants permission to get the current state of block public access for AMIs at the account level in the specified AWS Region
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows ec2:GetImageBlockPublicAccessState. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEc2GetImageBlockPublicAccessState",
"Effect": "Allow",
"Action": "ec2:GetImageBlockPublicAccessState",
"Resource": "*"
}
]
}