Amazon EC2 (ec2)

2026-09-02

17 new actions, 1 new resource | 2 updated actions

Additions

    Actions
  • BatchModifyIpamRoutingPolicyRegistrations
    • Description:  Grants permission to modify multiple routing policy registrations in a single operation
    • Access:  Write
    • Resources: 

      Name: ipam-internet-registry-association

      Required: Yes

    • Conditions: 

      ec2:Region
  • CreateIpamInternetRegistryAssociation
    • Description:  Grants permission to create an association between an IPAM and a Regional Internet Registry (RIR) for Resource Public Key Infrastructure (RPKI) management
    • Access:  Write
    • Resources: 

      Name: ipam

      Required: Yes

      Name: ipam-internet-registry-association

      Required: Yes

    • Conditions: 

      ec2:Region
  • CreateIpamRoutingPolicyRegistration
    • Description:  Grants permission to create a routing policy registration and publish Route Origin Authorizations (ROAs) to the RPKI
    • Access:  Write
    • Resources: 

      Name: ipam-internet-registry-association

      Required: Yes

    • Conditions: 

      ec2:Region
  • DeleteIpamInternetRegistryAssociation
    • Description:  Grants permission to delete an IPAM internet registry association
    • Access:  Write
    • Resources: 

      Name: ipam-internet-registry-association

      Required: Yes

    • Conditions: 

      ec2:Region
  • DeleteIpamRoutingPolicyRegistration
    • Description:  Grants permission to delete a routing policy registration
    • Access:  Write
    • Resources: 

      Name: ipam-internet-registry-association

      Required: Yes

    • Conditions: 

      ec2:Region
  • DescribeAccountVpcEncryptionControl
    • Description:  Grants permission to describe the account-level VPC Encryption Control configuration
    • Access:  List
    • Conditions: 

      ec2:Region
  • DescribeIpamInternetRegistryAssociations
    • Description:  Grants permission to describe IPAM internet registry associations
    • Access:  List
    • Conditions: 

      ec2:Region
  • EnableIpamInternetRegistryAssociation
    • Description:  Grants permission to enable Resource Public Key Infrastructure (RPKI) on an IPAM internet registry association
    • Access:  Write
    • Resources: 

      Name: ipam-internet-registry-association

      Required: Yes

    • Conditions: 

      ec2:Region
  • GetIpamDiscoveredRoutes
    • Description:  Grants permission to retrieve Border Gateway Protocol (BGP) routes discovered by IPAM resource discovery
    • Access:  Read
    • Resources: 

      Name: ipam-resource-discovery

      Required: Yes

    • Conditions: 

      ec2:Region
  • GetIpamInternetRegistryAssociationAsns
    • Description:  Grants permission to retrieve Autonomous System Numbers (ASNs) registered with an internet registry for an IPAM internet registry association
    • Access:  Read
    • Resources: 

      Name: ipam-internet-registry-association

      Required: Yes

    • Conditions: 

      ec2:Region
  • GetIpamInternetRegistryAssociationCidrs
    • Description:  Grants permission to retrieve IP address CIDRs registered with an internet registry for an IPAM internet registry association
    • Access:  Read
    • Resources: 

      Name: ipam-internet-registry-association

      Required: Yes

    • Conditions: 

      ec2:Region
  • GetIpamRouteOriginAuthorizations
    • Description:  Grants permission to retrieve the current Route Origin Authorizations (ROAs) published to the RPKI for an IPAM internet registry association
    • Access:  Read
    • Resources: 

      Name: ipam-internet-registry-association

      Required: Yes

    • Conditions: 

      ec2:Region
  • GetIpamRouteProtectionFindings
    • Description:  Grants permission to retrieve route protection findings for an IPAM
    • Access:  Read
    • Resources: 

      Name: ipam

      Required: Yes

    • Conditions: 

      ec2:Region
  • GetIpamRoutingPolicyRegistrationDeltas
    • Description:  Grants permission to retrieve the history of routing policy registration changes for an IPAM internet registry association
    • Access:  Read
    • Resources: 

      Name: ipam-internet-registry-association

      Required: Yes

    • Conditions: 

      ec2:Region
  • GetIpamRoutingPolicyRegistrations
    • Description:  Grants permission to retrieve routing policy registrations for an IPAM internet registry association
    • Access:  Read
    • Resources: 

      Name: ipam-internet-registry-association

      Required: Yes

    • Conditions: 

      ec2:Region
  • ModifyAccountVpcEncryptionControl
    • Description:  Grants permission to modify the account-level VPC Encryption Control configuration
    • Access:  Write
    • Conditions: 

      ec2:Region
  • ModifyIpamRoutingPolicyRegistration
    • Description:  Grants permission to modify an existing routing policy registration
    • Access:  Write
    • Resources: 

      Name: ipam-internet-registry-association

      Required: Yes

    • Conditions: 

      ec2:Region
    Resources
  • ipam-internet-registry-association
    • Arn:  arn:${Partition}:ec2::${Account}:ipam-internet-registry-association/${IpamInternetRegistryAssociationId}
    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:ResourceTag/${TagKey}

      aws:TagKeys

      ec2:Attribute

      ec2:Attribute/${AttributeName}

      ec2:Region

      ec2:ResourceTag/${TagKey}

Updates