Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- //yang ni jalan. tapi tak restrict instancetype. semua boleh create
- {
- "Version": "2012-10-17",
- "Statement": [
- {
- "Sid": "VisualEditor0",
- "Effect": "Allow",
- "Action": [
- "ec2:DescribeImages",
- "ec2:DescribeInstances",
- "ec2:DescribeVpcs",
- "ec2:CreateKeyPair",
- "ec2:DescribeSubnets",
- "ec2:DescribeKeyPairs",
- "ec2:RunInstances",
- "ec2:DescribeSecurityGroups"
- ],
- "Resource": "*"
- }
- ]
- }
- //yang ni cuba untuk restrict ke t3.nano. tapi dapat error unauthorised
- {
- "Version": "2012-10-17",
- "Statement": [
- {
- "Sid": "VisualEditor0",
- "Effect": "Allow",
- "Action": [
- "ec2:DescribeImages",
- "ec2:DescribeInstances",
- "ec2:DescribeVpcs",
- "ec2:CreateKeyPair",
- "ec2:DescribeSubnets",
- "ec2:DescribeKeyPairs",
- "ec2:RunInstances",
- "ec2:DescribeSecurityGroups"
- ],
- "Resource": "*"
- },
- {
- "Sid": "VisualEditor1",
- "Effect": "Allow",
- "Action": "ec2:RunInstances",
- "Resource": "*",
- "Condition": {
- "StringEquals": {
- "ec2:InstanceType": "t3.nano"
- }
- }
- }
- ]
- }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement