ec2:ModifyInstanceCapacityReservationAttributes is a Write access-level action in the ec2 service. Grants permission to modify the Capacity Reservation settings for a stopped instance
ARNs that ec2:ModifyInstanceCapacityReservationAttributes can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants ec2:ModifyInstanceCapacityReservationAttributes.
Filters access by a tag key and value pair that is allowed in the request
Filters access by a tag key and value pair of a resource
Filters access by a list of tag keys that are allowed in the request
Filters access by an attribute of a resource
Filters access by an attribute being set on a resource
Filters access by the name of an Availability Zone in an AWS Region
Filters access by the ID of an Availability Zone in an AWS Region
Filters access by the ARN of the Capacity Reservation Fleet
Filters access by commitment duration of the Capacity Reservation
Filters access by the state of AMD SEV-SNP CPU Options. Currently, only US East (Ohio) and Europe (Ireland) are supported
Filters access by the date and time at which the Capacity Reservation was created
Filters access by the ID of the Capacity Reservation that you want to move capacity into
Filters access by whether the instance is enabled for EBS optimization
Filters access by the ARN of the placement group
Filters access by the date and time at which the Capacity Reservation ends
Filters access by the way in which the Capacity Reservation ends
Filters access by whether the instance is enabled for ephemeral storage
Filters access by the product code that is associated with the AMI
Filters access by the name of the AWS Region
Filters access by whether the instance type supports auto recovery
Filters access by the bandwidth weighting of an instance
Filters access by the number of instances
Filters access by a tag key and value pair of a resource
Filters access by the ID of an instance
Filters access by the market or purchasing option of an instance (capacity-block, on-demand, or spot)
Filters access by the root device type of the instance (ebs or instance-store)
Filters access by the type of instance launches that the Capacity Reservation accepts
Filters access by whether the instance allows access to instance tags from the instance metadata
Filters access by the type of operating system for which the Capacity Reservation reserves capacity
Filters access by the ARN of an instance profile
Filters access by the type of instance
Filters access by the ID of an interruptible Capacity Reservation
Filters access by the type of interruption
Filters access by the ID of the Capacity Reservation from which you want to move capacity
Filters access by whether Capacity Reservations are interruptible
Filters access by whether users are able to override resources that are specified in the launch template
Filters access by the number of instances the interruptible Capacity Reservation is assigned
Filters access by the ARN of a launch template
Filters access by the tenancy of the VPC or instance (default, dedicated, or host)
Filters access by the presence of an EC2 operator provisioning a managed resource
Filters access by whether the HTTP endpoint is enabled for the instance metadata service
Filters access by the allowed number of hops when calling the instance metadata service
Filters access by whether tokens are required when calling the instance metadata service (optional or required)
Filters access by the ARN of the instance profile being attached
Filters access by the ARN of the Outpost
A minimal policy that allows ec2:ModifyInstanceCapacityReservationAttributes. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEc2ModifyInstanceCapacityReservationAttributes",
"Effect": "Allow",
"Action": "ec2:ModifyInstanceCapacityReservationAttributes",
"Resource": "*"
}
]
}