ec2:GetIpamPolicyAllocationRules

List

ec2:GetIpamPolicyAllocationRules is a List access-level action in the ec2 service. Grants permission to describe the rules that define how Amazon VPC IP Address Manager (IPAM) pools allocate IP addresses to AWS resource types within an IPAM policy

Resource types

ARNs that ec2:GetIpamPolicyAllocationRules can be scoped to in an IAM policy.

arn:${Partition}:ec2::${Account}:ipam-policy/${IpamPolicyId}
ipam-policy

Condition keys

Keys you can use in the Condition block of a policy that grants ec2:GetIpamPolicyAllocationRules.

aws:RequestTag/${TagKey} String

Filters access by a tag key and value pair that is allowed in the request

aws:ResourceTag/${TagKey} String

Filters access by a tag key and value pair of a resource

aws:TagKeys ArrayOfString

Filters access by a list of tag keys that are allowed in the request

ec2:Attribute String

Filters access by an attribute of a resource

ec2:Attribute/${AttributeName} String

Filters access by an attribute being set on a resource

ec2:Region String

Filters access by the name of the AWS Region

ec2:ResourceTag/${TagKey} String

Filters access by a tag key and value pair of a resource

Example IAM policy

A minimal policy that allows ec2:GetIpamPolicyAllocationRules. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowEc2GetIpamPolicyAllocationRules",
      "Effect": "Allow",
      "Action": "ec2:GetIpamPolicyAllocationRules",
      "Resource": "*"
    }
  ]
}

Related actions in ec2

View all ec2 actions →