Are there Amazon EC2 IAM Policy Actions for Tags

amazon ec2amazon-web-services

I just had a look at the IAM user guide. Looks like the EC2 section is very short and not really detailed.

Are there any IAM Policy Actions for creating/deleting EC2 insance tags? Something like ec2:CreateTags or ec2:DeleteTags?

Update:

Ok, I made a test. It is the undocumented "ec2:CreateTags" and "ec2:DeleteTags" policy action.

Best Answer

Below is the snippet of IAM policy that is working for me for creating tags.

{
    "Effect": "Allow",
    "Action": [
        "ec2:Describe*",
        "ec2:CreateTags"
    ],
    "Resource": [
        "*"
    ]
}