AWS EC2 (IAM)

aws compute

Amazon Elastic Compute Cloud (EC2) provides scalable virtual servers in the cloud for running applications.

Common permissions

ec2:RunInstancesec2:DescribeVpcsec2:CreateTagsec2:DescribeTagsec2:StopInstancesec2:StartInstancesec2:CreateKeyPairec2:DeleteKeyPair

Least-privilege example

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "ec2:RunInstances",
        "ec2:DescribeVpcs",
        "ec2:CreateTags",
        "ec2:DescribeTags",
        "ec2:StopInstances",
        "ec2:StartInstances",
        "ec2:CreateKeyPair",
        "ec2:DeleteKeyPair"
      ],
      "Resource": "*"
    }
  ]
}

Warnings

Avoid ec2:* — grants full control including termination of instances and deletion of resources.
Avoid ec2:RunInstances without resource constraints — can lead to unexpected costs.

Resources

AWS referenceservicereference.us-east-1.amazonaws.com/v1/ec2/ec2.json ↗

API

full doc /v1/iam/ec2