1 réponse
- Le plus récent
- Le plus de votes
- La plupart des commentaires
0
The following policy ensures that only EC2 instances, volumes and snapshots will launched if they have an "application" key with any value except null value.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Deny",
"Action": [
"ec2:CreateSnapshot",
"ec2:CreateVolume",
"ec2:RunInstances"
],
"Resource": [
"arn:aws:ec2:*::snapshot/*",
"arn:aws:ec2:*:*:instance/*",
"arn:aws:ec2:*:*:volume/*"
],
"Condition": {
"StringNotLike": {
"aws:RequestTag/application": "?*"
}
}
}
]
}
répondu il y a 4 ans
Contenus pertinents
- Réponse acceptéedemandé il y a un an
- demandé il y a un an
- demandé il y a un an
- AWS OFFICIELA mis à jour il y a 3 ans
- AWS OFFICIELA mis à jour il y a 3 mois
- AWS OFFICIELA mis à jour il y a 3 ans
I tried to implement something almost exactly like this without luck. Are we sure this works?