IAM / compute / ec2

AWS EC2 (IAM)

JSON →
AWSec2compute

Amazon Elastic Compute Cloud (EC2) provides scalable virtual servers in the cloud for running applications.

iamaws
docs ↗
Permissions
Actions in this service
ec2:RunInstances
ec2:DescribeVpcs
ec2:CreateTags
ec2:DescribeTags
ec2:StopInstances
ec2:StartInstances
ec2:CreateKeyPair
ec2:DeleteKeyPair
Policy
Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "ec2:RunInstances", "ec2:DescribeVpcs", "ec2:CreateTags", "ec2:DescribeTags", "ec2:StopInstances", "ec2:StartInstances", "ec2:CreateKeyPair", "ec2:DeleteKeyPair" ], "Resource": "*" } ] }
SDK mapping
Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns
Known gotchas
Avoid ec2:* — grants full control including termination of instances and deletion of resources.
Avoid ec2:RunInstances without resource constraints — can lead to unexpected costs.
Resources
docshttps://servicereference.us-east-1.amazonaws.com/v1/ec2/ec2.json ↗