ec2:GetInstanceMetadataDefaults is a List access-level action in the ec2 service. Grants permission to view the default instance metadata service (IMDS) settings set for your account in the specified Region
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows ec2:GetInstanceMetadataDefaults. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEc2GetInstanceMetadataDefaults",
"Effect": "Allow",
"Action": "ec2:GetInstanceMetadataDefaults",
"Resource": "*"
}
]
}