ec2:ModifyIpamPolicyAllocationRules

Write

ec2:ModifyIpamPolicyAllocationRules is a Write access-level action in the ec2 service. Grants permission to modify the rules that define how Amazon VPC IP Address Manager (IPAM) pools allocate IP addresses to AWS resource types within an IPAM policy

Resource types

ARNs that ec2:ModifyIpamPolicyAllocationRules can be scoped to in an IAM policy.

arn:${Partition}:ec2::${Account}:ipam-policy/${IpamPolicyId} required
ipam-policy
arn:${Partition}:ec2::${Account}:ipam-pool/${IpamPoolId}
ipam-pool

Condition keys

Keys you can use in the Condition block of a policy that grants ec2:ModifyIpamPolicyAllocationRules.

ec2:Region String

Filters access by the name of the AWS Region

aws:ResourceTag/${TagKey} String

Filters access by a tag key and value pair of a resource

ec2:ResourceTag/${TagKey} String

Filters access by a tag key and value pair of a resource

Example IAM policy

A minimal policy that allows ec2:ModifyIpamPolicyAllocationRules. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowEc2ModifyIpamPolicyAllocationRules",
      "Effect": "Allow",
      "Action": "ec2:ModifyIpamPolicyAllocationRules",
      "Resource": "*"
    }
  ]
}

Related actions in ec2

View all ec2 actions →