imagebuilder:UpdateInfrastructureConfiguration is a Write access-level action in the imagebuilder service. Grants permission to update an existing infrastructure configuration
ARNs that imagebuilder:UpdateInfrastructureConfiguration can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants imagebuilder:UpdateInfrastructureConfiguration.
Filters access by the tag key-value pairs attached to the resource created by Image Builder
Filters access by the presence of tag keys in the request
Filters access by the EC2 Instance Metadata HTTP Token Requirement specified in the request
Filters access by the SNS Topic Arn in the request to which terminal state notifications will be published
Filters access by tag key-value pairs attached to the resource
A minimal policy that allows imagebuilder:UpdateInfrastructureConfiguration. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowImagebuilderUpdateInfrastructureConfiguration",
"Effect": "Allow",
"Action": "imagebuilder:UpdateInfrastructureConfiguration",
"Resource": "*"
}
]
}