Skip to content

Policy: AWSServiceRoleForImageBuilder

ARN: arn:aws:iam::aws:policy/aws-service-role/AWSServiceRoleForImageBuilder

Allowed Actions

Actions Services
ec2:CancelExportTask ec2
ec2:CopyImage ec2
ec2:CreateImage ec2
ec2:CreateLaunchTemplate ec2
ec2:CreateLaunchTemplateVersion ec2
ec2:CreateTags ec2
ec2:CreateTags ec2
ec2:CreateTags ec2
ec2:DeregisterImage ec2
ec2:DescribeExportImageTasks ec2
ec2:DescribeHosts ec2
ec2:DescribeImages ec2
ec2:DescribeImportImageTasks ec2
ec2:DescribeInstanceAttribute ec2
ec2:DescribeInstanceStatus ec2
ec2:DescribeInstanceTypeOfferings ec2
ec2:DescribeInstanceTypes ec2
ec2:DescribeInstances ec2
ec2:DescribeLaunchTemplateVersions ec2
ec2:DescribeLaunchTemplates ec2
ec2:DescribeSnapshots ec2
ec2:DescribeSubnets ec2
ec2:DescribeTags ec2
ec2:EnableFastLaunch ec2
ec2:ExportImage ec2
ec2:ExportImage ec2
ec2:ModifyImageAttribute ec2
ec2:ModifyLaunchTemplate ec2
ec2:ModifySnapshotAttribute ec2
ec2:RegisterImage ec2
ec2:RegisterImage ec2
ec2:RunInstances ec2
ec2:RunInstances ec2
ec2:StartInstances ec2
ec2:StopInstances ec2
ec2:TerminateInstances ec2
ecr:BatchDeleteImage ecr
ecr:CreateRepository ecr
ecr:TagResource ecr
events:DeleteRule events
events:DescribeRule events
events:PutRule events
events:PutTargets events
events:RemoveTargets events
iam:CreateServiceLinkedRole iam
iam:PassRole iam
inspector2:ListCoverage inspector2
inspector2:ListFindings inspector2
kms:CreateGrant kms
kms:Decrypt kms
kms:DescribeKey kms
kms:Encrypt kms
kms:GenerateDataKeyWithoutPlaintext kms
kms:ReEncryptFrom kms
kms:ReEncryptTo kms
license-manager:UpdateLicenseSpecificationsForResource license-manager
logs:CreateLogGroup logs
logs:CreateLogStream logs
logs:PutLogEvents logs
sns:Publish sns
ssm:AddTagsToResource ssm
ssm:CreateAssociation ssm
ssm:DeleteAssociation ssm
ssm:DescribeAssociationExecutions ssm
ssm:DescribeInstanceAssociationsStatus ssm
ssm:DescribeInstanceInformation ssm
ssm:GetAutomationExecution ssm
ssm:GetCommandInvocation ssm
ssm:ListCommandInvocations ssm
ssm:ListCommands ssm
ssm:ListInventoryEntries ssm
ssm:SendAutomationSignal ssm
ssm:SendCommand ssm
ssm:SendCommand ssm
ssm:StartAutomationExecution ssm
ssm:StopAutomationExecution ssm
sts:AssumeRole sts