ec2:ModifyFleet is a Write access-level action in the ec2 service. Grants permission to modify an EC2 Fleet
ARNs that ec2:ModifyFleet can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants ec2:ModifyFleet.
Filters access by the name of the AWS Region
Filters access by a tag key and value pair of a resource
Filters access by an attribute of a resource
Filters access by an attribute being set on a resource
Filters access by a tag key and value pair of a resource
Filters access by the ID of an image
Filters access by the type of image (machine, aki, or ari)
Filters access by the owner of the resource (amazon, aws-marketplace, or an AWS account ID)
Filters access by whether the image has public launch permissions
Filters access by the root device type of the instance (ebs or instance-store)
Filters access by the presence of an EC2 operator provisioning a managed resource
Filters access by the name of an Availability Zone in an AWS Region
Filters access by the ID of an Availability Zone in an AWS Region
Filters access by the ID of a subnet
Filters access by the ARN of the VPC
A minimal policy that allows ec2:ModifyFleet. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEc2ModifyFleet",
"Effect": "Allow",
"Action": "ec2:ModifyFleet",
"Resource": "*"
}
]
}