ClearML/clearml-docs
1
0
Fork 0
mirror of https://github.com/clearml/clearml-docs synced 2025-02-12 07:25:44 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Edit AWS policy template (#672)

Browse Source
This commit is contained in:
pollfly 2023-09-20 13:38:42 +03:00 committed by GitHub
parent b171d597fc
commit c899c114b6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 16 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
docs/webapp/applications/apps_aws_autoscaler.md
View File

@ -191,12 +191,12 @@ The template policy below demonstrates how to restrict the autoscaler to launch
The policy includes the following permissions: The policy includes the following permissions:
* Enables performing certain EC2 actions on all resources in specified regions * Enables performing certain EC2 actions on all resources in specified regions
* Enables performing certain EC2 actions on all resources of specified instance types
* Enables performing certain EC2 actions on specified resources (in selected subnet and security group, and any network-interface, volume, key-pair, instance) * Enables performing certain EC2 actions on specified resources (in selected subnet and security group, and any network-interface, volume, key-pair, instance)
* Enables performing an EC2 action to use on a specified AMI on condition that the `ec2:Owner` is a specified owner * Enables performing an EC2 action to use on a specified AMI on condition that the `ec2:Owner` is a specified owner
```json ```json
{ {
"Version": "2012-10-17", "Version": "2012-10-17",
"Statement": [ "Statement": [
{ {
@ -219,11 +219,25 @@ The policy includes the following permissions:
} }
} }
}, },
{
"Sid": "RunEC2InstanceType",
"Effect": "Allow",
"Action": "ec2:RunInstances",
"Resource": "*",
"Condition": {
"StringLikeIfExists": {
"ec2:InstanceType": [
"<instance type 1>",
"<instance type 2>",
"<instance type 3>"
]
}
}
},
{ {
"Sid": "RunEC2", "Sid": "RunEC2",
"Effect": "Allow", "Effect": "Allow",
"Action": [ "Action": [
"ec2:RunInstances",
"ec2:CreateTags", "ec2:CreateTags",
"ec2:DeleteTags", "ec2:DeleteTags",
"ec2:StartInstances", "ec2:StartInstances",