43 lines
1.0 KiB
JSON
43 lines
1.0 KiB
JSON
|
{
|
||
|
|
"Version": "2012-10-17",
|
||
|
|
"Statement": [{
|
||
|
|
"Effect": "Allow",
|
||
|
|
"Action": [
|
||
|
|
"ec2:DescribeSecurityGroups",
|
||
|
|
"ec2:DescribeSecurityGroupRules",
|
||
|
|
"ec2:DescribeTags"
|
||
|
|
],
|
||
|
|
"Resource": "*"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"Effect": "Allow",
|
||
|
|
"Action": [
|
||
|
|
"ec2:AuthorizeSecurityGroupIngress",
|
||
|
|
"ec2:RevokeSecurityGroupIngress",
|
||
|
|
"ec2:AuthorizeSecurityGroupEgress",
|
||
|
|
"ec2:RevokeSecurityGroupEgress",
|
||
|
|
"ec2:ModifySecurityGroupRules",
|
||
|
|
"ec2:UpdateSecurityGroupRuleDescriptionsIngress",
|
||
|
|
"ec2:UpdateSecurityGroupRuleDescriptionsEgress"
|
||
|
|
],
|
||
|
|
"Resource": [
|
||
|
|
"arn:aws:ec2:region:111122223333:security-group/*"
|
||
|
|
],
|
||
|
|
"Condition": {
|
||
|
|
"StringEquals": {
|
||
|
|
"aws:ResourceTag/Department": "Test"
|
||
|
|
}
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"Effect": "Allow",
|
||
|
|
"Action": [
|
||
|
|
"ec2:ModifySecurityGroupRules"
|
||
|
|
],
|
||
|
|
"Resource": [
|
||
|
|
"arn:aws:ec2:region:111122223333:security-group-rule/*"
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|