24 lines
582 B
JSON
24 lines
582 B
JSON
|
{
|
||
|
|
"Version": "2012-10-17",
|
||
|
|
"Statement": [
|
||
|
|
{
|
||
|
|
"Sid": "AllowAllActionsForEC2",
|
||
|
|
"Effect": "Allow",
|
||
|
|
"Action": "ec2:*",
|
||
|
|
"Resource": "*"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"Sid": "DenyStopAndTerminateWhenMFAIsNotPresent",
|
||
|
|
"Effect": "Deny",
|
||
|
|
"Action": [
|
||
|
|
"ec2:StopInstances",
|
||
|
|
"ec2:TerminateInstances"
|
||
|
|
],
|
||
|
|
"Resource": "*",
|
||
|
|
"Condition": {
|
||
|
|
"BoolIfExists": {"aws:MultiFactorAuthPresent": false}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|