vpc-lattice:CreateServiceNetworkServiceAssociation is a Write access-level action in the vpc-lattice service. Grants permission to create a service network and service association
ARNs that vpc-lattice:CreateServiceNetworkServiceAssociation can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants vpc-lattice:CreateServiceNetworkServiceAssociation.
Filters access by the presence of tag key-value pairs in the request
Filters access by tag key-value pairs attached to the resource
Filters access by the presence of tag keys in the request
Filters access by the auth type specified in the request
Filters access by the name of a resource-creating API action
Filters access by the ARN of a service
Filters access by the ARN of a service network
A minimal policy that allows vpc-lattice:CreateServiceNetworkServiceAssociation. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowVpclatticeCreateServiceNetworkServiceAssociation",
"Effect": "Allow",
"Action": "vpc-lattice:CreateServiceNetworkServiceAssociation",
"Resource": "*"
}
]
}