# Actions, resources, and condition keys for Amazon EC2
Amazon EC2 (service prefix: `ec2`) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.
References:
+ Learn how to [configure this service](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/).
+ View a list of the [API operations available for this service](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/).
+ Learn how to secure this service and its resources by [using IAM](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/security-iam.html) permission policies.
+ View the [programmatic service authorization reference](https://servicereference.us-east-1.amazonaws.com/v1/ec2/ec2.json) for this service.
**Topics**
+ [API operations defined by Amazon EC2](#list_ec2-operations)
+ [Actions defined by Amazon EC2](#list_ec2-actions-as-permissions)
+ [Permission-only actions for Amazon EC2](#list_ec2-permission-only-actions)
+ [Resource types defined by Amazon EC2](#list_ec2-resources-for-iam-policies)
+ [Condition keys for Amazon EC2](#list_ec2-policy-keys)
## API operations defined by Amazon EC2
The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the [Actions table](#list_ec2-actions-as-permissions).
****
- ** AcceptAddressTransfer **
- **IAM action:** [ec2:AcceptAddressTransfer](#list_ec2-action-AcceptAddressTransfer) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** AcceptCapacityReservationBillingOwnership **
- **IAM action:** [ec2:AcceptCapacityReservationBillingOwnership](#list_ec2-action-AcceptCapacityReservationBillingOwnership)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AcceptReservedInstancesExchangeQuote **
- **IAM action:** [ec2:AcceptReservedInstancesExchangeQuote](#list_ec2-action-AcceptReservedInstancesExchangeQuote)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AcceptTransitGatewayClientVpnAttachment **
- **IAM action:** [ec2:AcceptTransitGatewayClientVpnAttachment](#list_ec2-action-AcceptTransitGatewayClientVpnAttachment)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AcceptTransitGatewayMulticastDomainAssociations **
- **IAM action:** [ec2:AcceptTransitGatewayMulticastDomainAssociations](#list_ec2-action-AcceptTransitGatewayMulticastDomainAssociations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AcceptTransitGatewayPeeringAttachment **
- **IAM action:** [ec2:AcceptTransitGatewayPeeringAttachment](#list_ec2-action-AcceptTransitGatewayPeeringAttachment)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AcceptTransitGatewayVpcAttachment **
- **IAM action:** [ec2:AcceptTransitGatewayVpcAttachment](#list_ec2-action-AcceptTransitGatewayVpcAttachment)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AcceptVpcEndpointConnections **
- **IAM action:** [ec2:AcceptVpcEndpointConnections](#list_ec2-action-AcceptVpcEndpointConnections)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AcceptVpcPeeringConnection **
- **IAM action:** [ec2:AcceptVpcPeeringConnection](#list_ec2-action-AcceptVpcPeeringConnection)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AdvertiseByoipCidr **
- **IAM action:** [ec2:AdvertiseByoipCidr](#list_ec2-action-AdvertiseByoipCidr)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AllocateAddress **
- **IAM action:** [ec2:AllocateAddress](#list_ec2-action-AllocateAddress) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** AllocateHosts **
- **IAM action:** [ec2:AllocateHosts](#list_ec2-action-AllocateHosts) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** AllocateIpamPoolCidr **
- **IAM action:** [ec2:AllocateIpamPoolCidr](#list_ec2-action-AllocateIpamPoolCidr) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** ApplySecurityGroupsToClientVpnTargetNetwork **
- **IAM action:** [ec2:ApplySecurityGroupsToClientVpnTargetNetwork](#list_ec2-action-ApplySecurityGroupsToClientVpnTargetNetwork)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AssignIpv6Addresses **
- **IAM action:** [ec2:AssignIpv6Addresses](#list_ec2-action-AssignIpv6Addresses)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AssignPrivateIpAddresses **
- **IAM action:** [ec2:AssignPrivateIpAddresses](#list_ec2-action-AssignPrivateIpAddresses)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AssignPrivateNatGatewayAddress **
- **IAM action:** [ec2:AssignPrivateNatGatewayAddress](#list_ec2-action-AssignPrivateNatGatewayAddress)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AssociateAddress **
- **IAM action:** [ec2:AssociateAddress](#list_ec2-action-AssociateAddress)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AssociateCapacityReservationBillingOwner **
- **IAM action:** [ec2:AssociateCapacityReservationBillingOwner](#list_ec2-action-AssociateCapacityReservationBillingOwner)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AssociateClientVpnTargetNetwork **
- **IAM action:** [ec2:AssociateClientVpnTargetNetwork](#list_ec2-action-AssociateClientVpnTargetNetwork)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AssociateDhcpOptions **
- **IAM action:** [ec2:AssociateDhcpOptions](#list_ec2-action-AssociateDhcpOptions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AssociateEnclaveCertificateIamRole **
- **IAM action:** [ec2:AssociateEnclaveCertificateIamRole](#list_ec2-action-AssociateEnclaveCertificateIamRole)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AssociateIamInstanceProfile **
- **IAM action:** [ec2:AssociateIamInstanceProfile](#list_ec2-action-AssociateIamInstanceProfile) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [iam:PassRole](https://docs.amazonaws.cn/IAM/latest/UserGuide/id_roles_use_passrole.html) / **Condition key:** iam:PassedToService / **Possible value(s):** ec2.amazonaws.com / **Access level:** Write
- ** AssociateInstanceEventWindow **
- **IAM action:** [ec2:AssociateInstanceEventWindow](#list_ec2-action-AssociateInstanceEventWindow)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AssociateIpamByoasn **
- **IAM action:** [ec2:AssociateIpamByoasn](#list_ec2-action-AssociateIpamByoasn)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AssociateIpamResourceDiscovery **
- **IAM action:** [ec2:AssociateIpamResourceDiscovery](#list_ec2-action-AssociateIpamResourceDiscovery) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** AssociateNatGatewayAddress **
- **IAM action:** [ec2:AssociateNatGatewayAddress](#list_ec2-action-AssociateNatGatewayAddress)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AssociateRouteServer **
- **IAM action:** [ec2:AssociateRouteServer](#list_ec2-action-AssociateRouteServer)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AssociateRouteTable **
- **IAM action:** [ec2:AssociateRouteTable](#list_ec2-action-AssociateRouteTable)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AssociateSecurityGroupVpc **
- **IAM action:** [ec2:AssociateSecurityGroupVpc](#list_ec2-action-AssociateSecurityGroupVpc)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AssociateSubnetCidrBlock **
- **IAM action:** [ec2:AssociateSubnetCidrBlock](#list_ec2-action-AssociateSubnetCidrBlock)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AssociateTransitGatewayMulticastDomain **
- **IAM action:** [ec2:AssociateTransitGatewayMulticastDomain](#list_ec2-action-AssociateTransitGatewayMulticastDomain)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AssociateTransitGatewayPolicyTable **
- **IAM action:** [ec2:AssociateTransitGatewayPolicyTable](#list_ec2-action-AssociateTransitGatewayPolicyTable)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AssociateTransitGatewayRouteTable **
- **IAM action:** [ec2:AssociateTransitGatewayRouteTable](#list_ec2-action-AssociateTransitGatewayRouteTable)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AssociateTrunkInterface **
- **IAM action:** [ec2:AssociateTrunkInterface](#list_ec2-action-AssociateTrunkInterface)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AssociateVpcCidrBlock **
- **IAM action:** [ec2:AssociateVpcCidrBlock](#list_ec2-action-AssociateVpcCidrBlock)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AttachClassicLinkVpc **
- **IAM action:** [ec2:AttachClassicLinkVpc](#list_ec2-action-AttachClassicLinkVpc)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AttachImageWatermark **
- **IAM action:** [ec2:AttachImageWatermark](#list_ec2-action-AttachImageWatermark)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AttachInternetGateway **
- **IAM action:** [ec2:AttachInternetGateway](#list_ec2-action-AttachInternetGateway)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AttachNetworkInterface **
- **IAM action:** [ec2:AttachNetworkInterface](#list_ec2-action-AttachNetworkInterface)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AttachVerifiedAccessTrustProvider **
- **IAM action:** [ec2:AttachVerifiedAccessTrustProvider](#list_ec2-action-AttachVerifiedAccessTrustProvider)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AttachVolume **
- **IAM action:** [ec2:AttachVolume](#list_ec2-action-AttachVolume)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AttachVpnGateway **
- **IAM action:** [ec2:AttachVpnGateway](#list_ec2-action-AttachVpnGateway)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AuthorizeClientVpnIngress **
- **IAM action:** [ec2:AuthorizeClientVpnIngress](#list_ec2-action-AuthorizeClientVpnIngress)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** AuthorizeSecurityGroupEgress **
- **IAM action:** [ec2:AuthorizeSecurityGroupEgress](#list_ec2-action-AuthorizeSecurityGroupEgress) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** AuthorizeSecurityGroupIngress **
- **IAM action:** [ec2:AuthorizeSecurityGroupIngress](#list_ec2-action-AuthorizeSecurityGroupIngress) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** BundleInstance **
- **IAM action:** [ec2:BundleInstance](#list_ec2-action-BundleInstance)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CancelBundleTask **
- **IAM action:** [ec2:CancelBundleTask](#list_ec2-action-CancelBundleTask)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CancelCapacityReservation **
- **IAM action:** [ec2:CancelCapacityReservation](#list_ec2-action-CancelCapacityReservation)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CancelCapacityReservationFleets **
- **IAM action:** [ec2:CancelCapacityReservationFleets](#list_ec2-action-CancelCapacityReservationFleets)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CancelConversionTask **
- **IAM action:** [ec2:CancelConversionTask](#list_ec2-action-CancelConversionTask)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CancelDeclarativePoliciesReport **
- **IAM action:** [ec2:CancelDeclarativePoliciesReport](#list_ec2-action-CancelDeclarativePoliciesReport)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CancelExportTask **
- **IAM action:** [ec2:CancelExportTask](#list_ec2-action-CancelExportTask)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CancelImageLaunchPermission **
- **IAM action:** [ec2:CancelImageLaunchPermission](#list_ec2-action-CancelImageLaunchPermission)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Permissions management, Write
- ** CancelImportTask **
- **IAM action:** [ec2:CancelImportTask](#list_ec2-action-CancelImportTask)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CancelReservedInstancesListing **
- **IAM action:** [ec2:CancelReservedInstancesListing](#list_ec2-action-CancelReservedInstancesListing)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CancelSpotFleetRequests **
- **IAM action:** [ec2:CancelSpotFleetRequests](#list_ec2-action-CancelSpotFleetRequests)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CancelSpotInstanceRequests **
- **IAM action:** [ec2:CancelSpotInstanceRequests](#list_ec2-action-CancelSpotInstanceRequests)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ConfirmProductInstance **
- **IAM action:** [ec2:ConfirmProductInstance](#list_ec2-action-ConfirmProductInstance)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CopyFpgaImage **
- **IAM action:** [ec2:CopyFpgaImage](#list_ec2-action-CopyFpgaImage)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CopyImage **
- **IAM action:** [ec2:CopyImage](#list_ec2-action-CopyImage) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CopySnapshot **
- **IAM action:** [ec2:CopySnapshot](#list_ec2-action-CopySnapshot) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CopyVolumes **
- **IAM action:** [ec2:CopyVolumes](#list_ec2-action-CopyVolumes) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateCapacityManagerDataExport **
- **IAM action:** [ec2:CreateCapacityManagerDataExport](#list_ec2-action-CreateCapacityManagerDataExport) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateCapacityReservation **
- **IAM action:** [ec2:CreateCapacityReservation](#list_ec2-action-CreateCapacityReservation) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateCapacityReservationBySplitting **
- **IAM action:** [ec2:CreateCapacityReservationBySplitting](#list_ec2-action-CreateCapacityReservationBySplitting) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateCapacityReservationCancellationQuote **
- **IAM action:** [ec2:CreateCapacityReservationCancellationQuote](#list_ec2-action-CreateCapacityReservationCancellationQuote) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateCapacityReservationFleet **
- **IAM action:** [ec2:CreateCapacityReservationFleet](#list_ec2-action-CreateCapacityReservationFleet) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateCarrierGateway **
- **IAM action:** [ec2:CreateCarrierGateway](#list_ec2-action-CreateCarrierGateway) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateClientVpnEndpoint **
- **IAM action:** [ec2:CreateClientVpnEndpoint](#list_ec2-action-CreateClientVpnEndpoint) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateClientVpnRoute **
- **IAM action:** [ec2:CreateClientVpnRoute](#list_ec2-action-CreateClientVpnRoute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateCoipCidr **
- **IAM action:** [ec2:CreateCoipCidr](#list_ec2-action-CreateCoipCidr)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateCoipPool **
- **IAM action:** [ec2:CreateCoipPool](#list_ec2-action-CreateCoipPool) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateCustomerGateway **
- **IAM action:** [ec2:CreateCustomerGateway](#list_ec2-action-CreateCustomerGateway) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateDefaultSubnet **
- **IAM action:** [ec2:CreateDefaultSubnet](#list_ec2-action-CreateDefaultSubnet)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateDefaultVpc **
- **IAM action:** [ec2:CreateDefaultVpc](#list_ec2-action-CreateDefaultVpc)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateDelegateMacVolumeOwnershipTask **
- **IAM action:** [ec2:CreateDelegateMacVolumeOwnershipTask](#list_ec2-action-CreateDelegateMacVolumeOwnershipTask) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateDhcpOptions **
- **IAM action:** [ec2:CreateDhcpOptions](#list_ec2-action-CreateDhcpOptions) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateEgressOnlyInternetGateway **
- **IAM action:** [ec2:CreateEgressOnlyInternetGateway](#list_ec2-action-CreateEgressOnlyInternetGateway) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateFleet **
- **IAM action:** [ec2:CreateFleet](#list_ec2-action-CreateFleet) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateFlowLogs **
- **IAM action:** [ec2:CreateFlowLogs](#list_ec2-action-CreateFlowLogs) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [iam:PassRole](https://docs.amazonaws.cn/IAM/latest/UserGuide/id_roles_use_passrole.html) / **Condition key:** iam:PassedToService / **Possible value(s):** vpc-flow-logs.amazonaws.com / **Access level:** Write
- ** CreateFpgaImage **
- **IAM action:** [ec2:CreateFpgaImage](#list_ec2-action-CreateFpgaImage) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateImage **
- **IAM action:** [ec2:CreateImage](#list_ec2-action-CreateImage) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateImageUsageReport **
- **IAM action:** [ec2:CreateImageUsageReport](#list_ec2-action-CreateImageUsageReport) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateInstanceConnectEndpoint **
- **IAM action:** [ec2:CreateInstanceConnectEndpoint](#list_ec2-action-CreateInstanceConnectEndpoint) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateInstanceEventWindow **
- **IAM action:** [ec2:CreateInstanceEventWindow](#list_ec2-action-CreateInstanceEventWindow) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateInstanceExportTask **
- **IAM action:** [ec2:CreateInstanceExportTask](#list_ec2-action-CreateInstanceExportTask) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateInternetGateway **
- **IAM action:** [ec2:CreateInternetGateway](#list_ec2-action-CreateInternetGateway) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateInterruptibleCapacityReservationAllocation **
- **IAM action:** [ec2:CreateInterruptibleCapacityReservationAllocation](#list_ec2-action-CreateInterruptibleCapacityReservationAllocation) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateIpam **
- **IAM action:** [ec2:CreateIpam](#list_ec2-action-CreateIpam) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateIpamExternalResourceVerificationToken **
- **IAM action:** [ec2:CreateIpamExternalResourceVerificationToken](#list_ec2-action-CreateIpamExternalResourceVerificationToken) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateIpamPolicy **
- **IAM action:** [ec2:CreateIpamPolicy](#list_ec2-action-CreateIpamPolicy) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateIpamPool **
- **IAM action:** [ec2:CreateIpamPool](#list_ec2-action-CreateIpamPool) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateIpamPrefixListResolver **
- **IAM action:** [ec2:CreateIpamPrefixListResolver](#list_ec2-action-CreateIpamPrefixListResolver) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateIpamPrefixListResolverTarget **
- **IAM action:** [ec2:CreateIpamPrefixListResolverTarget](#list_ec2-action-CreateIpamPrefixListResolverTarget) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateIpamResourceDiscovery **
- **IAM action:** [ec2:CreateIpamResourceDiscovery](#list_ec2-action-CreateIpamResourceDiscovery) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateIpamScope **
- **IAM action:** [ec2:CreateIpamScope](#list_ec2-action-CreateIpamScope) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateKeyPair **
- **IAM action:** [ec2:CreateKeyPair](#list_ec2-action-CreateKeyPair) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateLaunchTemplate **
- **IAM action:** [ec2:CreateLaunchTemplate](#list_ec2-action-CreateLaunchTemplate) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [iam:PassRole](https://docs.amazonaws.cn/IAM/latest/UserGuide/id_roles_use_passrole.html) / **Condition key:** iam:PassedToService / **Possible value(s):** ec2.amazonaws.com / **Access level:** Write
- ** CreateLaunchTemplateVersion **
- **IAM action:** [ec2:CreateLaunchTemplateVersion](#list_ec2-action-CreateLaunchTemplateVersion) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [iam:PassRole](https://docs.amazonaws.cn/IAM/latest/UserGuide/id_roles_use_passrole.html) / **Condition key:** iam:PassedToService / **Possible value(s):** ec2.amazonaws.com / **Access level:** Write
- ** CreateLocalGatewayRoute **
- **IAM action:** [ec2:CreateLocalGatewayRoute](#list_ec2-action-CreateLocalGatewayRoute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateLocalGatewayRouteTable **
- **IAM action:** [ec2:CreateLocalGatewayRouteTable](#list_ec2-action-CreateLocalGatewayRouteTable) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateLocalGatewayRouteTableVirtualInterfaceGroupAssociation **
- **IAM action:** [ec2:CreateLocalGatewayRouteTableVirtualInterfaceGroupAssociation](#list_ec2-action-CreateLocalGatewayRouteTableVirtualInterfaceGroupAssociation) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateLocalGatewayRouteTableVpcAssociation **
- **IAM action:** [ec2:CreateLocalGatewayRouteTableVpcAssociation](#list_ec2-action-CreateLocalGatewayRouteTableVpcAssociation) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateLocalGatewayVirtualInterface **
- **IAM action:** [ec2:CreateLocalGatewayVirtualInterface](#list_ec2-action-CreateLocalGatewayVirtualInterface) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateLocalGatewayVirtualInterfaceGroup **
- **IAM action:** [ec2:CreateLocalGatewayVirtualInterfaceGroup](#list_ec2-action-CreateLocalGatewayVirtualInterfaceGroup) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateMacSystemIntegrityProtectionModificationTask **
- **IAM action:** [ec2:CreateMacSystemIntegrityProtectionModificationTask](#list_ec2-action-CreateMacSystemIntegrityProtectionModificationTask) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateManagedPrefixList **
- **IAM action:** [ec2:CreateManagedPrefixList](#list_ec2-action-CreateManagedPrefixList) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateNatGateway **
- **IAM action:** [ec2:CreateNatGateway](#list_ec2-action-CreateNatGateway) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateNetworkAcl **
- **IAM action:** [ec2:CreateNetworkAcl](#list_ec2-action-CreateNetworkAcl) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateNetworkAclEntry **
- **IAM action:** [ec2:CreateNetworkAclEntry](#list_ec2-action-CreateNetworkAclEntry)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateNetworkInsightsAccessScope **
- **IAM action:** [ec2:CreateNetworkInsightsAccessScope](#list_ec2-action-CreateNetworkInsightsAccessScope) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateNetworkInsightsPath **
- **IAM action:** [ec2:CreateNetworkInsightsPath](#list_ec2-action-CreateNetworkInsightsPath) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateNetworkInterface **
- **IAM action:** [ec2:CreateNetworkInterface](#list_ec2-action-CreateNetworkInterface) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateNetworkInterfacePermission **
- **IAM action:** [ec2:CreateNetworkInterfacePermission](#list_ec2-action-CreateNetworkInterfacePermission)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Permissions management, Write
- ** CreatePlacementGroup **
- **IAM action:** [ec2:CreatePlacementGroup](#list_ec2-action-CreatePlacementGroup) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreatePublicIpv4Pool **
- **IAM action:** [ec2:CreatePublicIpv4Pool](#list_ec2-action-CreatePublicIpv4Pool) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateReplaceRootVolumeTask **
- **IAM action:** [ec2:CreateReplaceRootVolumeTask](#list_ec2-action-CreateReplaceRootVolumeTask) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateReservedInstancesListing **
- **IAM action:** [ec2:CreateReservedInstancesListing](#list_ec2-action-CreateReservedInstancesListing)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateRestoreImageTask **
- **IAM action:** [ec2:CreateRestoreImageTask](#list_ec2-action-CreateRestoreImageTask) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateRoute **
- **IAM action:** [ec2:CreateRoute](#list_ec2-action-CreateRoute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateRouteServer **
- **IAM action:** [ec2:CreateRouteServer](#list_ec2-action-CreateRouteServer) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateRouteServerEndpoint **
- **IAM action:** [ec2:CreateRouteServerEndpoint](#list_ec2-action-CreateRouteServerEndpoint) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateRouteServerPeer **
- **IAM action:** [ec2:CreateRouteServerPeer](#list_ec2-action-CreateRouteServerPeer) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateRouteTable **
- **IAM action:** [ec2:CreateRouteTable](#list_ec2-action-CreateRouteTable) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateSecondaryNetwork **
- **IAM action:** [ec2:CreateSecondaryNetwork](#list_ec2-action-CreateSecondaryNetwork) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateSecondarySubnet **
- **IAM action:** [ec2:CreateSecondarySubnet](#list_ec2-action-CreateSecondarySubnet) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateSecurityGroup **
- **IAM action:** [ec2:CreateSecurityGroup](#list_ec2-action-CreateSecurityGroup) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateSnapshot **
- **IAM action:** [ec2:CreateSnapshot](#list_ec2-action-CreateSnapshot) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateSnapshots **
- **IAM action:** [ec2:CreateSnapshots](#list_ec2-action-CreateSnapshots) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateSpotDatafeedSubscription **
- **IAM action:** [ec2:CreateSpotDatafeedSubscription](#list_ec2-action-CreateSpotDatafeedSubscription)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateStoreImageTask **
- **IAM action:** [ec2:CreateStoreImageTask](#list_ec2-action-CreateStoreImageTask)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateSubnet **
- **IAM action:** [ec2:CreateSubnet](#list_ec2-action-CreateSubnet) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateSubnetCidrReservation **
- **IAM action:** [ec2:CreateSubnetCidrReservation](#list_ec2-action-CreateSubnetCidrReservation) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- ** CreateTags **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Tagging, Write
- ** CreateTrafficMirrorFilter **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateTrafficMirrorFilter](#list_ec2-action-CreateTrafficMirrorFilter) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateTrafficMirrorFilterRule **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateTrafficMirrorFilterRule](#list_ec2-action-CreateTrafficMirrorFilterRule) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateTrafficMirrorSession **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateTrafficMirrorSession](#list_ec2-action-CreateTrafficMirrorSession) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateTrafficMirrorTarget **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateTrafficMirrorTarget](#list_ec2-action-CreateTrafficMirrorTarget) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateTransitGateway **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateTransitGateway](#list_ec2-action-CreateTransitGateway) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateTransitGatewayConnect **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateTransitGatewayConnect](#list_ec2-action-CreateTransitGatewayConnect) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateTransitGatewayConnectPeer **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateTransitGatewayConnectPeer](#list_ec2-action-CreateTransitGatewayConnectPeer) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateTransitGatewayMeteringPolicy **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateTransitGatewayMeteringPolicy](#list_ec2-action-CreateTransitGatewayMeteringPolicy) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateTransitGatewayMeteringPolicyEntry **
- **IAM action:** [ec2:CreateTransitGatewayMeteringPolicyEntry](#list_ec2-action-CreateTransitGatewayMeteringPolicyEntry)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateTransitGatewayMulticastDomain **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateTransitGatewayMulticastDomain](#list_ec2-action-CreateTransitGatewayMulticastDomain) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateTransitGatewayPeeringAttachment **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateTransitGatewayPeeringAttachment](#list_ec2-action-CreateTransitGatewayPeeringAttachment) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateTransitGatewayPolicyTable **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateTransitGatewayPolicyTable](#list_ec2-action-CreateTransitGatewayPolicyTable) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateTransitGatewayPrefixListReference **
- **IAM action:** [ec2:CreateTransitGatewayPrefixListReference](#list_ec2-action-CreateTransitGatewayPrefixListReference)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateTransitGatewayRoute **
- **IAM action:** [ec2:CreateTransitGatewayRoute](#list_ec2-action-CreateTransitGatewayRoute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateTransitGatewayRouteTable **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateTransitGatewayRouteTable](#list_ec2-action-CreateTransitGatewayRouteTable) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateTransitGatewayRouteTableAnnouncement **
- **IAM action:** [ec2:CreateTransitGatewayRouteTableAnnouncement](#list_ec2-action-CreateTransitGatewayRouteTableAnnouncement)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateTransitGatewayVpcAttachment **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateTransitGatewayVpcAttachment](#list_ec2-action-CreateTransitGatewayVpcAttachment) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateVerifiedAccessEndpoint **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateVerifiedAccessEndpoint](#list_ec2-action-CreateVerifiedAccessEndpoint) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateVerifiedAccessGroup **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateVerifiedAccessGroup](#list_ec2-action-CreateVerifiedAccessGroup) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateVerifiedAccessInstance **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateVerifiedAccessInstance](#list_ec2-action-CreateVerifiedAccessInstance) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateVerifiedAccessTrustProvider **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateVerifiedAccessTrustProvider](#list_ec2-action-CreateVerifiedAccessTrustProvider) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateVolume **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateVolume](#list_ec2-action-CreateVolume) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateVpc **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateVpc](#list_ec2-action-CreateVpc) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateVpcBlockPublicAccessExclusion **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateVpcBlockPublicAccessExclusion](#list_ec2-action-CreateVpcBlockPublicAccessExclusion) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateVpcEncryptionControl **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateVpcEncryptionControl](#list_ec2-action-CreateVpcEncryptionControl) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateVpcEndpoint **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateVpcEndpoint](#list_ec2-action-CreateVpcEndpoint) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateVpcEndpointConnectionNotification **
- **IAM action:** [ec2:CreateVpcEndpointConnectionNotification](#list_ec2-action-CreateVpcEndpointConnectionNotification)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateVpcEndpointServiceConfiguration **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateVpcEndpointServiceConfiguration](#list_ec2-action-CreateVpcEndpointServiceConfiguration) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateVpcPeeringConnection **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateVpcPeeringConnection](#list_ec2-action-CreateVpcPeeringConnection) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateVpnConcentrator **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateVpnConcentrator](#list_ec2-action-CreateVpnConcentrator) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateVpnConnection **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateVpnConnection](#list_ec2-action-CreateVpnConnection) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** CreateVpnConnectionRoute **
- **IAM action:** [ec2:CreateVpnConnectionRoute](#list_ec2-action-CreateVpnConnectionRoute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** CreateVpnGateway **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:CreateVpnGateway](#list_ec2-action-CreateVpnGateway) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** DeleteCapacityManagerDataExport **
- **IAM action:** [ec2:DeleteCapacityManagerDataExport](#list_ec2-action-DeleteCapacityManagerDataExport)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteCarrierGateway **
- **IAM action:** [ec2:DeleteCarrierGateway](#list_ec2-action-DeleteCarrierGateway)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteClientVpnEndpoint **
- **IAM action:** [ec2:DeleteClientVpnEndpoint](#list_ec2-action-DeleteClientVpnEndpoint)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteClientVpnRoute **
- **IAM action:** [ec2:DeleteClientVpnRoute](#list_ec2-action-DeleteClientVpnRoute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteCoipCidr **
- **IAM action:** [ec2:DeleteCoipCidr](#list_ec2-action-DeleteCoipCidr)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteCoipPool **
- **IAM action:** [ec2:DeleteCoipPool](#list_ec2-action-DeleteCoipPool)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteCustomerGateway **
- **IAM action:** [ec2:DeleteCustomerGateway](#list_ec2-action-DeleteCustomerGateway)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteDhcpOptions **
- **IAM action:** [ec2:DeleteDhcpOptions](#list_ec2-action-DeleteDhcpOptions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteEgressOnlyInternetGateway **
- **IAM action:** [ec2:DeleteEgressOnlyInternetGateway](#list_ec2-action-DeleteEgressOnlyInternetGateway)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteFleets **
- **IAM action:** [ec2:DeleteFleets](#list_ec2-action-DeleteFleets)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteFlowLogs **
- **IAM action:** [ec2:DeleteFlowLogs](#list_ec2-action-DeleteFlowLogs)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteFpgaImage **
- **IAM action:** [ec2:DeleteFpgaImage](#list_ec2-action-DeleteFpgaImage)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteImageUsageReport **
- **IAM action:** [ec2:DeleteImageUsageReport](#list_ec2-action-DeleteImageUsageReport)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteInstanceConnectEndpoint **
- **IAM action:** [ec2:DeleteInstanceConnectEndpoint](#list_ec2-action-DeleteInstanceConnectEndpoint)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteInstanceEventWindow **
- **IAM action:** [ec2:DeleteInstanceEventWindow](#list_ec2-action-DeleteInstanceEventWindow)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteInternetGateway **
- **IAM action:** [ec2:DeleteInternetGateway](#list_ec2-action-DeleteInternetGateway)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteIpam **
- **IAM action:** [ec2:DeleteIpam](#list_ec2-action-DeleteIpam)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteIpamExternalResourceVerificationToken **
- **IAM action:** [ec2:DeleteIpamExternalResourceVerificationToken](#list_ec2-action-DeleteIpamExternalResourceVerificationToken)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteIpamPolicy **
- **IAM action:** [ec2:DeleteIpamPolicy](#list_ec2-action-DeleteIpamPolicy)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteIpamPool **
- **IAM action:** [ec2:DeleteIpamPool](#list_ec2-action-DeleteIpamPool)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteIpamPrefixListResolver **
- **IAM action:** [ec2:DeleteIpamPrefixListResolver](#list_ec2-action-DeleteIpamPrefixListResolver)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteIpamPrefixListResolverTarget **
- **IAM action:** [ec2:DeleteIpamPrefixListResolverTarget](#list_ec2-action-DeleteIpamPrefixListResolverTarget)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteIpamResourceDiscovery **
- **IAM action:** [ec2:DeleteIpamResourceDiscovery](#list_ec2-action-DeleteIpamResourceDiscovery)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteIpamScope **
- **IAM action:** [ec2:DeleteIpamScope](#list_ec2-action-DeleteIpamScope)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteKeyPair **
- **IAM action:** [ec2:DeleteKeyPair](#list_ec2-action-DeleteKeyPair)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteLaunchTemplate **
- **IAM action:** [ec2:DeleteLaunchTemplate](#list_ec2-action-DeleteLaunchTemplate)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteLaunchTemplateVersions **
- **IAM action:** [ec2:DeleteLaunchTemplateVersions](#list_ec2-action-DeleteLaunchTemplateVersions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteLocalGatewayRoute **
- **IAM action:** [ec2:DeleteLocalGatewayRoute](#list_ec2-action-DeleteLocalGatewayRoute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteLocalGatewayRouteTable **
- **IAM action:** [ec2:DeleteLocalGatewayRouteTable](#list_ec2-action-DeleteLocalGatewayRouteTable)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteLocalGatewayRouteTableVirtualInterfaceGroupAssociation **
- **IAM action:** [ec2:DeleteLocalGatewayRouteTableVirtualInterfaceGroupAssociation](#list_ec2-action-DeleteLocalGatewayRouteTableVirtualInterfaceGroupAssociation)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteLocalGatewayRouteTableVpcAssociation **
- **IAM action:** [ec2:DeleteLocalGatewayRouteTableVpcAssociation](#list_ec2-action-DeleteLocalGatewayRouteTableVpcAssociation)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteLocalGatewayVirtualInterface **
- **IAM action:** [ec2:DeleteLocalGatewayVirtualInterface](#list_ec2-action-DeleteLocalGatewayVirtualInterface)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteLocalGatewayVirtualInterfaceGroup **
- **IAM action:** [ec2:DeleteLocalGatewayVirtualInterfaceGroup](#list_ec2-action-DeleteLocalGatewayVirtualInterfaceGroup)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteManagedPrefixList **
- **IAM action:** [ec2:DeleteManagedPrefixList](#list_ec2-action-DeleteManagedPrefixList)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteNatGateway **
- **IAM action:** [ec2:DeleteNatGateway](#list_ec2-action-DeleteNatGateway)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteNetworkAcl **
- **IAM action:** [ec2:DeleteNetworkAcl](#list_ec2-action-DeleteNetworkAcl)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteNetworkAclEntry **
- **IAM action:** [ec2:DeleteNetworkAclEntry](#list_ec2-action-DeleteNetworkAclEntry)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteNetworkInsightsAccessScope **
- **IAM action:** [ec2:DeleteNetworkInsightsAccessScope](#list_ec2-action-DeleteNetworkInsightsAccessScope)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteNetworkInsightsAccessScopeAnalysis **
- **IAM action:** [ec2:DeleteNetworkInsightsAccessScopeAnalysis](#list_ec2-action-DeleteNetworkInsightsAccessScopeAnalysis)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteNetworkInsightsAnalysis **
- **IAM action:** [ec2:DeleteNetworkInsightsAnalysis](#list_ec2-action-DeleteNetworkInsightsAnalysis)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteNetworkInsightsPath **
- **IAM action:** [ec2:DeleteNetworkInsightsPath](#list_ec2-action-DeleteNetworkInsightsPath)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteNetworkInterface **
- **IAM action:** [ec2:DeleteNetworkInterface](#list_ec2-action-DeleteNetworkInterface)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteNetworkInterfacePermission **
- **IAM action:** [ec2:DeleteNetworkInterfacePermission](#list_ec2-action-DeleteNetworkInterfacePermission)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Permissions management, Write
- ** DeletePlacementGroup **
- **IAM action:** [ec2:DeletePlacementGroup](#list_ec2-action-DeletePlacementGroup)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeletePublicIpv4Pool **
- **IAM action:** [ec2:DeletePublicIpv4Pool](#list_ec2-action-DeletePublicIpv4Pool)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteQueuedReservedInstances **
- **IAM action:** [ec2:DeleteQueuedReservedInstances](#list_ec2-action-DeleteQueuedReservedInstances)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteRoute **
- **IAM action:** [ec2:DeleteRoute](#list_ec2-action-DeleteRoute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteRouteServer **
- **IAM action:** [ec2:DeleteRouteServer](#list_ec2-action-DeleteRouteServer)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteRouteServerEndpoint **
- **IAM action:** [ec2:DeleteRouteServerEndpoint](#list_ec2-action-DeleteRouteServerEndpoint)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteRouteServerPeer **
- **IAM action:** [ec2:DeleteRouteServerPeer](#list_ec2-action-DeleteRouteServerPeer)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteRouteTable **
- **IAM action:** [ec2:DeleteRouteTable](#list_ec2-action-DeleteRouteTable)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteSecondaryNetwork **
- **IAM action:** [ec2:DeleteSecondaryNetwork](#list_ec2-action-DeleteSecondaryNetwork)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteSecondarySubnet **
- **IAM action:** [ec2:DeleteSecondarySubnet](#list_ec2-action-DeleteSecondarySubnet)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteSecurityGroup **
- **IAM action:** [ec2:DeleteSecurityGroup](#list_ec2-action-DeleteSecurityGroup)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteSnapshot **
- **IAM action:** [ec2:DeleteSnapshot](#list_ec2-action-DeleteSnapshot)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteSpotDatafeedSubscription **
- **IAM action:** [ec2:DeleteSpotDatafeedSubscription](#list_ec2-action-DeleteSpotDatafeedSubscription)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteSubnet **
- **IAM action:** [ec2:DeleteSubnet](#list_ec2-action-DeleteSubnet)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteSubnetCidrReservation **
- **IAM action:** [ec2:DeleteSubnetCidrReservation](#list_ec2-action-DeleteSubnetCidrReservation)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteTags **
- **IAM action:** [ec2:DeleteTags](#list_ec2-action-DeleteTags)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Tagging, Write
- ** DeleteTrafficMirrorFilter **
- **IAM action:** [ec2:DeleteTrafficMirrorFilter](#list_ec2-action-DeleteTrafficMirrorFilter)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteTrafficMirrorFilterRule **
- **IAM action:** [ec2:DeleteTrafficMirrorFilterRule](#list_ec2-action-DeleteTrafficMirrorFilterRule)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteTrafficMirrorSession **
- **IAM action:** [ec2:DeleteTrafficMirrorSession](#list_ec2-action-DeleteTrafficMirrorSession)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteTrafficMirrorTarget **
- **IAM action:** [ec2:DeleteTrafficMirrorTarget](#list_ec2-action-DeleteTrafficMirrorTarget)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteTransitGateway **
- **IAM action:** [ec2:DeleteTransitGateway](#list_ec2-action-DeleteTransitGateway)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteTransitGatewayClientVpnAttachment **
- **IAM action:** [ec2:DeleteTransitGatewayClientVpnAttachment](#list_ec2-action-DeleteTransitGatewayClientVpnAttachment)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteTransitGatewayConnect **
- **IAM action:** [ec2:DeleteTransitGatewayConnect](#list_ec2-action-DeleteTransitGatewayConnect)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteTransitGatewayConnectPeer **
- **IAM action:** [ec2:DeleteTransitGatewayConnectPeer](#list_ec2-action-DeleteTransitGatewayConnectPeer)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteTransitGatewayMeteringPolicy **
- **IAM action:** [ec2:DeleteTransitGatewayMeteringPolicy](#list_ec2-action-DeleteTransitGatewayMeteringPolicy)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteTransitGatewayMeteringPolicyEntry **
- **IAM action:** [ec2:DeleteTransitGatewayMeteringPolicyEntry](#list_ec2-action-DeleteTransitGatewayMeteringPolicyEntry)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteTransitGatewayMulticastDomain **
- **IAM action:** [ec2:DeleteTransitGatewayMulticastDomain](#list_ec2-action-DeleteTransitGatewayMulticastDomain)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteTransitGatewayPeeringAttachment **
- **IAM action:** [ec2:DeleteTransitGatewayPeeringAttachment](#list_ec2-action-DeleteTransitGatewayPeeringAttachment)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteTransitGatewayPolicyTable **
- **IAM action:** [ec2:DeleteTransitGatewayPolicyTable](#list_ec2-action-DeleteTransitGatewayPolicyTable)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteTransitGatewayPrefixListReference **
- **IAM action:** [ec2:DeleteTransitGatewayPrefixListReference](#list_ec2-action-DeleteTransitGatewayPrefixListReference)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteTransitGatewayRoute **
- **IAM action:** [ec2:DeleteTransitGatewayRoute](#list_ec2-action-DeleteTransitGatewayRoute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteTransitGatewayRouteTable **
- **IAM action:** [ec2:DeleteTransitGatewayRouteTable](#list_ec2-action-DeleteTransitGatewayRouteTable)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteTransitGatewayRouteTableAnnouncement **
- **IAM action:** [ec2:DeleteTransitGatewayRouteTableAnnouncement](#list_ec2-action-DeleteTransitGatewayRouteTableAnnouncement)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteTransitGatewayVpcAttachment **
- **IAM action:** [ec2:DeleteTransitGatewayVpcAttachment](#list_ec2-action-DeleteTransitGatewayVpcAttachment)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteVerifiedAccessEndpoint **
- **IAM action:** [ec2:DeleteVerifiedAccessEndpoint](#list_ec2-action-DeleteVerifiedAccessEndpoint)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteVerifiedAccessGroup **
- **IAM action:** [ec2:DeleteVerifiedAccessGroup](#list_ec2-action-DeleteVerifiedAccessGroup)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteVerifiedAccessInstance **
- **IAM action:** [ec2:DeleteVerifiedAccessInstance](#list_ec2-action-DeleteVerifiedAccessInstance)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteVerifiedAccessTrustProvider **
- **IAM action:** [ec2:DeleteVerifiedAccessTrustProvider](#list_ec2-action-DeleteVerifiedAccessTrustProvider)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteVolume **
- **IAM action:** [ec2:DeleteVolume](#list_ec2-action-DeleteVolume)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteVpc **
- **IAM action:** [ec2:DeleteVpc](#list_ec2-action-DeleteVpc)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteVpcBlockPublicAccessExclusion **
- **IAM action:** [ec2:DeleteVpcBlockPublicAccessExclusion](#list_ec2-action-DeleteVpcBlockPublicAccessExclusion)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteVpcEncryptionControl **
- **IAM action:** [ec2:DeleteVpcEncryptionControl](#list_ec2-action-DeleteVpcEncryptionControl)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteVpcEndpointConnectionNotifications **
- **IAM action:** [ec2:DeleteVpcEndpointConnectionNotifications](#list_ec2-action-DeleteVpcEndpointConnectionNotifications)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteVpcEndpointServiceConfigurations **
- **IAM action:** [ec2:DeleteVpcEndpointServiceConfigurations](#list_ec2-action-DeleteVpcEndpointServiceConfigurations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteVpcEndpoints **
- **IAM action:** [ec2:DeleteVpcEndpoints](#list_ec2-action-DeleteVpcEndpoints)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteVpcPeeringConnection **
- **IAM action:** [ec2:DeleteVpcPeeringConnection](#list_ec2-action-DeleteVpcPeeringConnection)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteVpnConcentrator **
- **IAM action:** [ec2:DeleteVpnConcentrator](#list_ec2-action-DeleteVpnConcentrator)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteVpnConnection **
- **IAM action:** [ec2:DeleteVpnConnection](#list_ec2-action-DeleteVpnConnection)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteVpnConnectionRoute **
- **IAM action:** [ec2:DeleteVpnConnectionRoute](#list_ec2-action-DeleteVpnConnectionRoute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeleteVpnGateway **
- **IAM action:** [ec2:DeleteVpnGateway](#list_ec2-action-DeleteVpnGateway)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeprovisionByoipCidr **
- **IAM action:** [ec2:DeprovisionByoipCidr](#list_ec2-action-DeprovisionByoipCidr)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeprovisionIpamByoasn **
- **IAM action:** [ec2:DeprovisionIpamByoasn](#list_ec2-action-DeprovisionIpamByoasn)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeprovisionIpamPoolCidr **
- **IAM action:** [ec2:DeprovisionIpamPoolCidr](#list_ec2-action-DeprovisionIpamPoolCidr)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeprovisionPublicIpv4PoolCidr **
- **IAM action:** [ec2:DeprovisionPublicIpv4PoolCidr](#list_ec2-action-DeprovisionPublicIpv4PoolCidr)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeregisterImage **
- **IAM action:** [ec2:DeregisterImage](#list_ec2-action-DeregisterImage)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeregisterInstanceEventNotificationAttributes **
- **IAM action:** [ec2:DeregisterInstanceEventNotificationAttributes](#list_ec2-action-DeregisterInstanceEventNotificationAttributes)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeregisterTransitGatewayMulticastGroupMembers **
- **IAM action:** [ec2:DeregisterTransitGatewayMulticastGroupMembers](#list_ec2-action-DeregisterTransitGatewayMulticastGroupMembers)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DeregisterTransitGatewayMulticastGroupSources **
- **IAM action:** [ec2:DeregisterTransitGatewayMulticastGroupSources](#list_ec2-action-DeregisterTransitGatewayMulticastGroupSources)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DescribeAccountAttributes **
- **IAM action:** [ec2:DescribeAccountAttributes](#list_ec2-action-DescribeAccountAttributes)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeAddressTransfers **
- **IAM action:** [ec2:DescribeAddressTransfers](#list_ec2-action-DescribeAddressTransfers)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeAddresses **
- **IAM action:** [ec2:DescribeAddresses](#list_ec2-action-DescribeAddresses)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeAddressesAttribute **
- **IAM action:** [ec2:DescribeAddressesAttribute](#list_ec2-action-DescribeAddressesAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeAggregateIdFormat **
- **IAM action:** [ec2:DescribeAggregateIdFormat](#list_ec2-action-DescribeAggregateIdFormat)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeAvailabilityZones **
- **IAM action:** [ec2:DescribeAvailabilityZones](#list_ec2-action-DescribeAvailabilityZones)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeAwsNetworkPerformanceMetricSubscriptions **
- **IAM action:** [ec2:DescribeAwsNetworkPerformanceMetricSubscriptions](#list_ec2-action-DescribeAwsNetworkPerformanceMetricSubscriptions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeBundleTasks **
- **IAM action:** [ec2:DescribeBundleTasks](#list_ec2-action-DescribeBundleTasks)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeByoipCidrs **
- **IAM action:** [ec2:DescribeByoipCidrs](#list_ec2-action-DescribeByoipCidrs)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeCapacityBlockExtensionHistory **
- **IAM action:** [ec2:DescribeCapacityBlockExtensionHistory](#list_ec2-action-DescribeCapacityBlockExtensionHistory)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeCapacityBlockExtensionOfferings **
- **IAM action:** [ec2:DescribeCapacityBlockExtensionOfferings](#list_ec2-action-DescribeCapacityBlockExtensionOfferings)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeCapacityBlockOfferings **
- **IAM action:** [ec2:DescribeCapacityBlockOfferings](#list_ec2-action-DescribeCapacityBlockOfferings)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeCapacityBlockStatus **
- **IAM action:** [ec2:DescribeCapacityBlockStatus](#list_ec2-action-DescribeCapacityBlockStatus)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeCapacityBlocks **
- **IAM action:** [ec2:DescribeCapacityBlocks](#list_ec2-action-DescribeCapacityBlocks)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeCapacityManagerDataExports **
- **IAM action:** [ec2:DescribeCapacityManagerDataExports](#list_ec2-action-DescribeCapacityManagerDataExports)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeCapacityReservationBillingRequests **
- **IAM action:** [ec2:DescribeCapacityReservationBillingRequests](#list_ec2-action-DescribeCapacityReservationBillingRequests)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeCapacityReservationCancellationQuotes **
- **IAM action:** [ec2:DescribeCapacityReservationCancellationQuotes](#list_ec2-action-DescribeCapacityReservationCancellationQuotes)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeCapacityReservationFleets **
- **IAM action:** [ec2:DescribeCapacityReservationFleets](#list_ec2-action-DescribeCapacityReservationFleets)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeCapacityReservationTopology **
- **IAM action:** [ec2:DescribeCapacityReservationTopology](#list_ec2-action-DescribeCapacityReservationTopology)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeCapacityReservations **
- **IAM action:** [ec2:DescribeCapacityReservations](#list_ec2-action-DescribeCapacityReservations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeCarrierGateways **
- **IAM action:** [ec2:DescribeCarrierGateways](#list_ec2-action-DescribeCarrierGateways)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeClassicLinkInstances **
- **IAM action:** [ec2:DescribeClassicLinkInstances](#list_ec2-action-DescribeClassicLinkInstances)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeClientVpnAuthorizationRules **
- **IAM action:** [ec2:DescribeClientVpnAuthorizationRules](#list_ec2-action-DescribeClientVpnAuthorizationRules)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeClientVpnConnections **
- **IAM action:** [ec2:DescribeClientVpnConnections](#list_ec2-action-DescribeClientVpnConnections)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeClientVpnEndpoints **
- **IAM action:** [ec2:DescribeClientVpnEndpoints](#list_ec2-action-DescribeClientVpnEndpoints)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeClientVpnRoutes **
- **IAM action:** [ec2:DescribeClientVpnRoutes](#list_ec2-action-DescribeClientVpnRoutes)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeClientVpnTargetNetworks **
- **IAM action:** [ec2:DescribeClientVpnTargetNetworks](#list_ec2-action-DescribeClientVpnTargetNetworks)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeCoipPools **
- **IAM action:** [ec2:DescribeCoipPools](#list_ec2-action-DescribeCoipPools)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeConversionTasks **
- **IAM action:** [ec2:DescribeConversionTasks](#list_ec2-action-DescribeConversionTasks)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeCustomerGateways **
- **IAM action:** [ec2:DescribeCustomerGateways](#list_ec2-action-DescribeCustomerGateways)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeDeclarativePoliciesReports **
- **IAM action:** [ec2:DescribeDeclarativePoliciesReports](#list_ec2-action-DescribeDeclarativePoliciesReports)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeDhcpOptions **
- **IAM action:** [ec2:DescribeDhcpOptions](#list_ec2-action-DescribeDhcpOptions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeEgressOnlyInternetGateways **
- **IAM action:** [ec2:DescribeEgressOnlyInternetGateways](#list_ec2-action-DescribeEgressOnlyInternetGateways)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeExportImageTasks **
- **IAM action:** [ec2:DescribeExportImageTasks](#list_ec2-action-DescribeExportImageTasks)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeExportTasks **
- **IAM action:** [ec2:DescribeExportTasks](#list_ec2-action-DescribeExportTasks)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeFastLaunchImages **
- **IAM action:** [ec2:DescribeFastLaunchImages](#list_ec2-action-DescribeFastLaunchImages)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeFastSnapshotRestores **
- **IAM action:** [ec2:DescribeFastSnapshotRestores](#list_ec2-action-DescribeFastSnapshotRestores)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeFleetHistory **
- **IAM action:** [ec2:DescribeFleetHistory](#list_ec2-action-DescribeFleetHistory)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeFleetInstances **
- **IAM action:** [ec2:DescribeFleetInstances](#list_ec2-action-DescribeFleetInstances)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeFleets **
- **IAM action:** [ec2:DescribeFleets](#list_ec2-action-DescribeFleets)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeFlowLogs **
- **IAM action:** [ec2:DescribeFlowLogs](#list_ec2-action-DescribeFlowLogs)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeFpgaImageAttribute **
- **IAM action:** [ec2:DescribeFpgaImageAttribute](#list_ec2-action-DescribeFpgaImageAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeFpgaImages **
- **IAM action:** [ec2:DescribeFpgaImages](#list_ec2-action-DescribeFpgaImages)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeHostReservationOfferings **
- **IAM action:** [ec2:DescribeHostReservationOfferings](#list_ec2-action-DescribeHostReservationOfferings)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeHostReservations **
- **IAM action:** [ec2:DescribeHostReservations](#list_ec2-action-DescribeHostReservations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeHosts **
- **IAM action:** [ec2:DescribeHosts](#list_ec2-action-DescribeHosts)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeIamInstanceProfileAssociations **
- **IAM action:** [ec2:DescribeIamInstanceProfileAssociations](#list_ec2-action-DescribeIamInstanceProfileAssociations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeIdFormat **
- **IAM action:** [ec2:DescribeIdFormat](#list_ec2-action-DescribeIdFormat)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeIdentityIdFormat **
- **IAM action:** [ec2:DescribeIdentityIdFormat](#list_ec2-action-DescribeIdentityIdFormat)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeImageAttribute **
- **IAM action:** [ec2:DescribeImageAttribute](#list_ec2-action-DescribeImageAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeImageReferences **
- **IAM action:** [ec2:DescribeImageReferences](#list_ec2-action-DescribeImageReferences)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeImageUsageReportEntries **
- **IAM action:** [ec2:DescribeImageUsageReportEntries](#list_ec2-action-DescribeImageUsageReportEntries)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeImageUsageReports **
- **IAM action:** [ec2:DescribeImageUsageReports](#list_ec2-action-DescribeImageUsageReports)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeImages **
- **IAM action:** [ec2:DescribeImages](#list_ec2-action-DescribeImages)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeImportImageTasks **
- **IAM action:** [ec2:DescribeImportImageTasks](#list_ec2-action-DescribeImportImageTasks)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeImportSnapshotTasks **
- **IAM action:** [ec2:DescribeImportSnapshotTasks](#list_ec2-action-DescribeImportSnapshotTasks)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeInstanceAttribute **
- **IAM action:** [ec2:DescribeInstanceAttribute](#list_ec2-action-DescribeInstanceAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeInstanceConnectEndpoints **
- **IAM action:** [ec2:DescribeInstanceConnectEndpoints](#list_ec2-action-DescribeInstanceConnectEndpoints)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeInstanceCreditSpecifications **
- **IAM action:** [ec2:DescribeInstanceCreditSpecifications](#list_ec2-action-DescribeInstanceCreditSpecifications)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeInstanceEventNotificationAttributes **
- **IAM action:** [ec2:DescribeInstanceEventNotificationAttributes](#list_ec2-action-DescribeInstanceEventNotificationAttributes)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeInstanceEventWindows **
- **IAM action:** [ec2:DescribeInstanceEventWindows](#list_ec2-action-DescribeInstanceEventWindows)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeInstanceImageMetadata **
- **IAM action:** [ec2:DescribeInstanceImageMetadata](#list_ec2-action-DescribeInstanceImageMetadata)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeInstanceSqlHaHistoryStates **
- **IAM action:** [ec2:DescribeInstanceSqlHaHistoryStates](#list_ec2-action-DescribeInstanceSqlHaHistoryStates)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeInstanceSqlHaStates **
- **IAM action:** [ec2:DescribeInstanceSqlHaStates](#list_ec2-action-DescribeInstanceSqlHaStates)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeInstanceStatus **
- **IAM action:** [ec2:DescribeInstanceStatus](#list_ec2-action-DescribeInstanceStatus)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeInstanceTopology **
- **IAM action:** [ec2:DescribeInstanceTopology](#list_ec2-action-DescribeInstanceTopology)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeInstanceTypeOfferings **
- **IAM action:** [ec2:DescribeInstanceTypeOfferings](#list_ec2-action-DescribeInstanceTypeOfferings)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeInstanceTypes **
- **IAM action:** [ec2:DescribeInstanceTypes](#list_ec2-action-DescribeInstanceTypes)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeInstances **
- **IAM action:** [ec2:DescribeInstances](#list_ec2-action-DescribeInstances)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeInternetGateways **
- **IAM action:** [ec2:DescribeInternetGateways](#list_ec2-action-DescribeInternetGateways)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeIpamByoasn **
- **IAM action:** [ec2:DescribeIpamByoasn](#list_ec2-action-DescribeIpamByoasn)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeIpamExternalResourceVerificationTokens **
- **IAM action:** [ec2:DescribeIpamExternalResourceVerificationTokens](#list_ec2-action-DescribeIpamExternalResourceVerificationTokens)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeIpamPolicies **
- **IAM action:** [ec2:DescribeIpamPolicies](#list_ec2-action-DescribeIpamPolicies)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeIpamPoolAllocations **
- **IAM action:** [ec2:DescribeIpamPoolAllocations](#list_ec2-action-DescribeIpamPoolAllocations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeIpamPools **
- **IAM action:** [ec2:DescribeIpamPools](#list_ec2-action-DescribeIpamPools)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeIpamPrefixListResolverTargets **
- **IAM action:** [ec2:DescribeIpamPrefixListResolverTargets](#list_ec2-action-DescribeIpamPrefixListResolverTargets)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeIpamPrefixListResolvers **
- **IAM action:** [ec2:DescribeIpamPrefixListResolvers](#list_ec2-action-DescribeIpamPrefixListResolvers)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeIpamResourceDiscoveries **
- **IAM action:** [ec2:DescribeIpamResourceDiscoveries](#list_ec2-action-DescribeIpamResourceDiscoveries)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeIpamResourceDiscoveryAssociations **
- **IAM action:** [ec2:DescribeIpamResourceDiscoveryAssociations](#list_ec2-action-DescribeIpamResourceDiscoveryAssociations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeIpamScopes **
- **IAM action:** [ec2:DescribeIpamScopes](#list_ec2-action-DescribeIpamScopes)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeIpams **
- **IAM action:** [ec2:DescribeIpams](#list_ec2-action-DescribeIpams)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeIpv6Pools **
- **IAM action:** [ec2:DescribeIpv6Pools](#list_ec2-action-DescribeIpv6Pools)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeKeyPairs **
- **IAM action:** [ec2:DescribeKeyPairs](#list_ec2-action-DescribeKeyPairs)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeLaunchTemplateVersions **
- **IAM action:** [ec2:DescribeLaunchTemplateVersions](#list_ec2-action-DescribeLaunchTemplateVersions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeLaunchTemplates **
- **IAM action:** [ec2:DescribeLaunchTemplates](#list_ec2-action-DescribeLaunchTemplates)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations **
- **IAM action:** [ec2:DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations](#list_ec2-action-DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeLocalGatewayRouteTableVpcAssociations **
- **IAM action:** [ec2:DescribeLocalGatewayRouteTableVpcAssociations](#list_ec2-action-DescribeLocalGatewayRouteTableVpcAssociations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeLocalGatewayRouteTables **
- **IAM action:** [ec2:DescribeLocalGatewayRouteTables](#list_ec2-action-DescribeLocalGatewayRouteTables)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeLocalGatewayVirtualInterfaceGroups **
- **IAM action:** [ec2:DescribeLocalGatewayVirtualInterfaceGroups](#list_ec2-action-DescribeLocalGatewayVirtualInterfaceGroups)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeLocalGatewayVirtualInterfaces **
- **IAM action:** [ec2:DescribeLocalGatewayVirtualInterfaces](#list_ec2-action-DescribeLocalGatewayVirtualInterfaces)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeLocalGateways **
- **IAM action:** [ec2:DescribeLocalGateways](#list_ec2-action-DescribeLocalGateways)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeLockedSnapshots **
- **IAM action:** [ec2:DescribeLockedSnapshots](#list_ec2-action-DescribeLockedSnapshots)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeMacHosts **
- **IAM action:** [ec2:DescribeMacHosts](#list_ec2-action-DescribeMacHosts)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeMacModificationTasks **
- **IAM action:** [ec2:DescribeMacModificationTasks](#list_ec2-action-DescribeMacModificationTasks)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeManagedPrefixLists **
- **IAM action:** [ec2:DescribeManagedPrefixLists](#list_ec2-action-DescribeManagedPrefixLists)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeNatGateways **
- **IAM action:** [ec2:DescribeNatGateways](#list_ec2-action-DescribeNatGateways)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeNetworkAcls **
- **IAM action:** [ec2:DescribeNetworkAcls](#list_ec2-action-DescribeNetworkAcls)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeNetworkInsightsAccessScopeAnalyses **
- **IAM action:** [ec2:DescribeNetworkInsightsAccessScopeAnalyses](#list_ec2-action-DescribeNetworkInsightsAccessScopeAnalyses)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeNetworkInsightsAccessScopes **
- **IAM action:** [ec2:DescribeNetworkInsightsAccessScopes](#list_ec2-action-DescribeNetworkInsightsAccessScopes)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeNetworkInsightsAnalyses **
- **IAM action:** [ec2:DescribeNetworkInsightsAnalyses](#list_ec2-action-DescribeNetworkInsightsAnalyses)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeNetworkInsightsPaths **
- **IAM action:** [ec2:DescribeNetworkInsightsPaths](#list_ec2-action-DescribeNetworkInsightsPaths)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeNetworkInterfaceAttribute **
- **IAM action:** [ec2:DescribeNetworkInterfaceAttribute](#list_ec2-action-DescribeNetworkInterfaceAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeNetworkInterfacePermissions **
- **IAM action:** [ec2:DescribeNetworkInterfacePermissions](#list_ec2-action-DescribeNetworkInterfacePermissions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeNetworkInterfaces **
- **IAM action:** [ec2:DescribeNetworkInterfaces](#list_ec2-action-DescribeNetworkInterfaces)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeOutpostLags **
- **IAM action:** [ec2:DescribeOutpostLags](#list_ec2-action-DescribeOutpostLags)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribePlacementGroups **
- **IAM action:** [ec2:DescribePlacementGroups](#list_ec2-action-DescribePlacementGroups)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribePrefixLists **
- **IAM action:** [ec2:DescribePrefixLists](#list_ec2-action-DescribePrefixLists)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribePrincipalIdFormat **
- **IAM action:** [ec2:DescribePrincipalIdFormat](#list_ec2-action-DescribePrincipalIdFormat)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribePublicIpv4Pools **
- **IAM action:** [ec2:DescribePublicIpv4Pools](#list_ec2-action-DescribePublicIpv4Pools)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeRegions **
- **IAM action:** [ec2:DescribeRegions](#list_ec2-action-DescribeRegions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeReplaceRootVolumeTasks **
- **IAM action:** [ec2:DescribeReplaceRootVolumeTasks](#list_ec2-action-DescribeReplaceRootVolumeTasks)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeReservedInstances **
- **IAM action:** [ec2:DescribeReservedInstances](#list_ec2-action-DescribeReservedInstances)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeReservedInstancesListings **
- **IAM action:** [ec2:DescribeReservedInstancesListings](#list_ec2-action-DescribeReservedInstancesListings)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeReservedInstancesModifications **
- **IAM action:** [ec2:DescribeReservedInstancesModifications](#list_ec2-action-DescribeReservedInstancesModifications)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeReservedInstancesOfferings **
- **IAM action:** [ec2:DescribeReservedInstancesOfferings](#list_ec2-action-DescribeReservedInstancesOfferings)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeRouteServerEndpoints **
- **IAM action:** [ec2:DescribeRouteServerEndpoints](#list_ec2-action-DescribeRouteServerEndpoints)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeRouteServerPeers **
- **IAM action:** [ec2:DescribeRouteServerPeers](#list_ec2-action-DescribeRouteServerPeers)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeRouteServers **
- **IAM action:** [ec2:DescribeRouteServers](#list_ec2-action-DescribeRouteServers)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeRouteTables **
- **IAM action:** [ec2:DescribeRouteTables](#list_ec2-action-DescribeRouteTables)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeScheduledInstanceAvailability **
- **IAM action:** [ec2:DescribeScheduledInstanceAvailability](#list_ec2-action-DescribeScheduledInstanceAvailability)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeScheduledInstances **
- **IAM action:** [ec2:DescribeScheduledInstances](#list_ec2-action-DescribeScheduledInstances)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeSecondaryInterfaces **
- **IAM action:** [ec2:DescribeSecondaryInterfaces](#list_ec2-action-DescribeSecondaryInterfaces)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeSecondaryNetworks **
- **IAM action:** [ec2:DescribeSecondaryNetworks](#list_ec2-action-DescribeSecondaryNetworks)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeSecondarySubnets **
- **IAM action:** [ec2:DescribeSecondarySubnets](#list_ec2-action-DescribeSecondarySubnets)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeSecurityGroupReferences **
- **IAM action:** [ec2:DescribeSecurityGroupReferences](#list_ec2-action-DescribeSecurityGroupReferences)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeSecurityGroupRules **
- **IAM action:** [ec2:DescribeSecurityGroupRules](#list_ec2-action-DescribeSecurityGroupRules)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeSecurityGroupVpcAssociations **
- **IAM action:** [ec2:DescribeSecurityGroupVpcAssociations](#list_ec2-action-DescribeSecurityGroupVpcAssociations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeSecurityGroups **
- **IAM action:** [ec2:DescribeSecurityGroups](#list_ec2-action-DescribeSecurityGroups)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeServiceLinkVirtualInterfaces **
- **IAM action:** [ec2:DescribeServiceLinkVirtualInterfaces](#list_ec2-action-DescribeServiceLinkVirtualInterfaces)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeSnapshotAttribute **
- **IAM action:** [ec2:DescribeSnapshotAttribute](#list_ec2-action-DescribeSnapshotAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeSnapshotTierStatus **
- **IAM action:** [ec2:DescribeSnapshotTierStatus](#list_ec2-action-DescribeSnapshotTierStatus)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeSnapshots **
- **IAM action:** [ec2:DescribeSnapshots](#list_ec2-action-DescribeSnapshots)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeSpotDatafeedSubscription **
- **IAM action:** [ec2:DescribeSpotDatafeedSubscription](#list_ec2-action-DescribeSpotDatafeedSubscription)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeSpotFleetInstances **
- **IAM action:** [ec2:DescribeSpotFleetInstances](#list_ec2-action-DescribeSpotFleetInstances)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeSpotFleetRequestHistory **
- **IAM action:** [ec2:DescribeSpotFleetRequestHistory](#list_ec2-action-DescribeSpotFleetRequestHistory)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeSpotFleetRequests **
- **IAM action:** [ec2:DescribeSpotFleetRequests](#list_ec2-action-DescribeSpotFleetRequests)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeSpotInstanceRequests **
- **IAM action:** [ec2:DescribeSpotInstanceRequests](#list_ec2-action-DescribeSpotInstanceRequests)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeSpotPriceHistory **
- **IAM action:** [ec2:DescribeSpotPriceHistory](#list_ec2-action-DescribeSpotPriceHistory)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeStaleSecurityGroups **
- **IAM action:** [ec2:DescribeStaleSecurityGroups](#list_ec2-action-DescribeStaleSecurityGroups)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeStoreImageTasks **
- **IAM action:** [ec2:DescribeStoreImageTasks](#list_ec2-action-DescribeStoreImageTasks)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeSubnets **
- **IAM action:** [ec2:DescribeSubnets](#list_ec2-action-DescribeSubnets)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeTags **
- **IAM action:** [ec2:DescribeTags](#list_ec2-action-DescribeTags)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeTrafficMirrorFilterRules **
- **IAM action:** [ec2:DescribeTrafficMirrorFilterRules](#list_ec2-action-DescribeTrafficMirrorFilterRules)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeTrafficMirrorFilters **
- **IAM action:** [ec2:DescribeTrafficMirrorFilters](#list_ec2-action-DescribeTrafficMirrorFilters)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeTrafficMirrorSessions **
- **IAM action:** [ec2:DescribeTrafficMirrorSessions](#list_ec2-action-DescribeTrafficMirrorSessions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeTrafficMirrorTargets **
- **IAM action:** [ec2:DescribeTrafficMirrorTargets](#list_ec2-action-DescribeTrafficMirrorTargets)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeTransitGatewayAttachments **
- **IAM action:** [ec2:DescribeTransitGatewayAttachments](#list_ec2-action-DescribeTransitGatewayAttachments)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeTransitGatewayConnectPeers **
- **IAM action:** [ec2:DescribeTransitGatewayConnectPeers](#list_ec2-action-DescribeTransitGatewayConnectPeers)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeTransitGatewayConnects **
- **IAM action:** [ec2:DescribeTransitGatewayConnects](#list_ec2-action-DescribeTransitGatewayConnects)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeTransitGatewayMeteringPolicies **
- **IAM action:** [ec2:DescribeTransitGatewayMeteringPolicies](#list_ec2-action-DescribeTransitGatewayMeteringPolicies)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeTransitGatewayMulticastDomains **
- **IAM action:** [ec2:DescribeTransitGatewayMulticastDomains](#list_ec2-action-DescribeTransitGatewayMulticastDomains)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeTransitGatewayPeeringAttachments **
- **IAM action:** [ec2:DescribeTransitGatewayPeeringAttachments](#list_ec2-action-DescribeTransitGatewayPeeringAttachments)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeTransitGatewayPolicyTables **
- **IAM action:** [ec2:DescribeTransitGatewayPolicyTables](#list_ec2-action-DescribeTransitGatewayPolicyTables)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeTransitGatewayRouteTableAnnouncements **
- **IAM action:** [ec2:DescribeTransitGatewayRouteTableAnnouncements](#list_ec2-action-DescribeTransitGatewayRouteTableAnnouncements)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeTransitGatewayRouteTables **
- **IAM action:** [ec2:DescribeTransitGatewayRouteTables](#list_ec2-action-DescribeTransitGatewayRouteTables)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeTransitGatewayVpcAttachments **
- **IAM action:** [ec2:DescribeTransitGatewayVpcAttachments](#list_ec2-action-DescribeTransitGatewayVpcAttachments)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeTransitGateways **
- **IAM action:** [ec2:DescribeTransitGateways](#list_ec2-action-DescribeTransitGateways)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeTrunkInterfaceAssociations **
- **IAM action:** [ec2:DescribeTrunkInterfaceAssociations](#list_ec2-action-DescribeTrunkInterfaceAssociations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVerifiedAccessEndpoints **
- **IAM action:** [ec2:DescribeVerifiedAccessEndpoints](#list_ec2-action-DescribeVerifiedAccessEndpoints)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVerifiedAccessGroups **
- **IAM action:** [ec2:DescribeVerifiedAccessGroups](#list_ec2-action-DescribeVerifiedAccessGroups)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVerifiedAccessInstanceLoggingConfigurations **
- **IAM action:** [ec2:DescribeVerifiedAccessInstanceLoggingConfigurations](#list_ec2-action-DescribeVerifiedAccessInstanceLoggingConfigurations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVerifiedAccessInstances **
- **IAM action:** [ec2:DescribeVerifiedAccessInstances](#list_ec2-action-DescribeVerifiedAccessInstances)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVerifiedAccessTrustProviders **
- **IAM action:** [ec2:DescribeVerifiedAccessTrustProviders](#list_ec2-action-DescribeVerifiedAccessTrustProviders)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVolumeAttribute **
- **IAM action:** [ec2:DescribeVolumeAttribute](#list_ec2-action-DescribeVolumeAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVolumeStatus **
- **IAM action:** [ec2:DescribeVolumeStatus](#list_ec2-action-DescribeVolumeStatus)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVolumes **
- **IAM action:** [ec2:DescribeVolumes](#list_ec2-action-DescribeVolumes)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVolumesModifications **
- **IAM action:** [ec2:DescribeVolumesModifications](#list_ec2-action-DescribeVolumesModifications)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVpcAttribute **
- **IAM action:** [ec2:DescribeVpcAttribute](#list_ec2-action-DescribeVpcAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVpcBlockPublicAccessExclusions **
- **IAM action:** [ec2:DescribeVpcBlockPublicAccessExclusions](#list_ec2-action-DescribeVpcBlockPublicAccessExclusions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVpcBlockPublicAccessOptions **
- **IAM action:** [ec2:DescribeVpcBlockPublicAccessOptions](#list_ec2-action-DescribeVpcBlockPublicAccessOptions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVpcClassicLink **
- **IAM action:** [ec2:DescribeVpcClassicLink](#list_ec2-action-DescribeVpcClassicLink)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVpcClassicLinkDnsSupport **
- **IAM action:** [ec2:DescribeVpcClassicLinkDnsSupport](#list_ec2-action-DescribeVpcClassicLinkDnsSupport)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVpcEncryptionControls **
- **IAM action:** [ec2:DescribeVpcEncryptionControls](#list_ec2-action-DescribeVpcEncryptionControls)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVpcEndpointAssociations **
- **IAM action:** [ec2:DescribeVpcEndpointAssociations](#list_ec2-action-DescribeVpcEndpointAssociations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVpcEndpointConnectionNotifications **
- **IAM action:** [ec2:DescribeVpcEndpointConnectionNotifications](#list_ec2-action-DescribeVpcEndpointConnectionNotifications)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVpcEndpointConnections **
- **IAM action:** [ec2:DescribeVpcEndpointConnections](#list_ec2-action-DescribeVpcEndpointConnections)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVpcEndpointServiceConfigurations **
- **IAM action:** [ec2:DescribeVpcEndpointServiceConfigurations](#list_ec2-action-DescribeVpcEndpointServiceConfigurations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVpcEndpointServicePermissions **
- **IAM action:** [ec2:DescribeVpcEndpointServicePermissions](#list_ec2-action-DescribeVpcEndpointServicePermissions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVpcEndpointServices **
- **IAM action:** [ec2:DescribeVpcEndpointServices](#list_ec2-action-DescribeVpcEndpointServices)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVpcEndpoints **
- **IAM action:** [ec2:DescribeVpcEndpoints](#list_ec2-action-DescribeVpcEndpoints)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVpcPeeringConnections **
- **IAM action:** [ec2:DescribeVpcPeeringConnections](#list_ec2-action-DescribeVpcPeeringConnections)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVpcs **
- **IAM action:** [ec2:DescribeVpcs](#list_ec2-action-DescribeVpcs)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVpnConcentrators **
- **IAM action:** [ec2:DescribeVpnConcentrators](#list_ec2-action-DescribeVpnConcentrators)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVpnConnections **
- **IAM action:** [ec2:DescribeVpnConnections](#list_ec2-action-DescribeVpnConnections)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DescribeVpnGateways **
- **IAM action:** [ec2:DescribeVpnGateways](#list_ec2-action-DescribeVpnGateways)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** DetachClassicLinkVpc **
- **IAM action:** [ec2:DetachClassicLinkVpc](#list_ec2-action-DetachClassicLinkVpc)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DetachImageWatermark **
- **IAM action:** [ec2:DetachImageWatermark](#list_ec2-action-DetachImageWatermark)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DetachInternetGateway **
- **IAM action:** [ec2:DetachInternetGateway](#list_ec2-action-DetachInternetGateway)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DetachNetworkInterface **
- **IAM action:** [ec2:DetachNetworkInterface](#list_ec2-action-DetachNetworkInterface)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DetachVerifiedAccessTrustProvider **
- **IAM action:** [ec2:DetachVerifiedAccessTrustProvider](#list_ec2-action-DetachVerifiedAccessTrustProvider)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DetachVolume **
- **IAM action:** [ec2:DetachVolume](#list_ec2-action-DetachVolume)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DetachVpnGateway **
- **IAM action:** [ec2:DetachVpnGateway](#list_ec2-action-DetachVpnGateway)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisableAddressTransfer **
- **IAM action:** [ec2:DisableAddressTransfer](#list_ec2-action-DisableAddressTransfer)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisableAllowedImagesSettings **
- **IAM action:** [ec2:DisableAllowedImagesSettings](#list_ec2-action-DisableAllowedImagesSettings)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisableAwsNetworkPerformanceMetricSubscription **
- **IAM action:** [ec2:DisableAwsNetworkPerformanceMetricSubscription](#list_ec2-action-DisableAwsNetworkPerformanceMetricSubscription)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisableCapacityManager **
- **IAM action:** [ec2:DisableCapacityManager](#list_ec2-action-DisableCapacityManager)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisableEbsEncryptionByDefault **
- **IAM action:** [ec2:DisableEbsEncryptionByDefault](#list_ec2-action-DisableEbsEncryptionByDefault)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisableFastLaunch **
- **IAM action:** [ec2:DisableFastLaunch](#list_ec2-action-DisableFastLaunch)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisableFastSnapshotRestores **
- **IAM action:** [ec2:DisableFastSnapshotRestores](#list_ec2-action-DisableFastSnapshotRestores)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisableImage **
- **IAM action:** [ec2:DisableImage](#list_ec2-action-DisableImage)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisableImageBlockPublicAccess **
- **IAM action:** [ec2:DisableImageBlockPublicAccess](#list_ec2-action-DisableImageBlockPublicAccess)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Permissions management, Write
- ** DisableImageDeprecation **
- **IAM action:** [ec2:DisableImageDeprecation](#list_ec2-action-DisableImageDeprecation)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisableImageDeregistrationProtection **
- **IAM action:** [ec2:DisableImageDeregistrationProtection](#list_ec2-action-DisableImageDeregistrationProtection)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisableInstanceSqlHaStandbyDetections **
- **IAM action:** [ec2:DisableInstanceSqlHaStandbyDetections](#list_ec2-action-DisableInstanceSqlHaStandbyDetections)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisableIpamOrganizationAdminAccount **
- **IAM action:** [ec2:DisableIpamOrganizationAdminAccount](#list_ec2-action-DisableIpamOrganizationAdminAccount)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisableIpamPolicy **
- **IAM action:** [ec2:DisableIpamPolicy](#list_ec2-action-DisableIpamPolicy)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisableRouteServerPropagation **
- **IAM action:** [ec2:DisableRouteServerPropagation](#list_ec2-action-DisableRouteServerPropagation)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisableSerialConsoleAccess **
- **IAM action:** [ec2:DisableSerialConsoleAccess](#list_ec2-action-DisableSerialConsoleAccess)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisableSnapshotBlockPublicAccess **
- **IAM action:** [ec2:DisableSnapshotBlockPublicAccess](#list_ec2-action-DisableSnapshotBlockPublicAccess)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Permissions management, Write
- ** DisableTransitGatewayRouteTablePropagation **
- **IAM action:** [ec2:DisableTransitGatewayRouteTablePropagation](#list_ec2-action-DisableTransitGatewayRouteTablePropagation)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisableVgwRoutePropagation **
- **IAM action:** [ec2:DisableVgwRoutePropagation](#list_ec2-action-DisableVgwRoutePropagation)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisableVpcClassicLink **
- **IAM action:** [ec2:DisableVpcClassicLink](#list_ec2-action-DisableVpcClassicLink)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisableVpcClassicLinkDnsSupport **
- **IAM action:** [ec2:DisableVpcClassicLinkDnsSupport](#list_ec2-action-DisableVpcClassicLinkDnsSupport)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisassociateAddress **
- **IAM action:** [ec2:DisassociateAddress](#list_ec2-action-DisassociateAddress)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisassociateCapacityReservationBillingOwner **
- **IAM action:** [ec2:DisassociateCapacityReservationBillingOwner](#list_ec2-action-DisassociateCapacityReservationBillingOwner)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisassociateClientVpnTargetNetwork **
- **IAM action:** [ec2:DisassociateClientVpnTargetNetwork](#list_ec2-action-DisassociateClientVpnTargetNetwork)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisassociateEnclaveCertificateIamRole **
- **IAM action:** [ec2:DisassociateEnclaveCertificateIamRole](#list_ec2-action-DisassociateEnclaveCertificateIamRole)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisassociateIamInstanceProfile **
- **IAM action:** [ec2:DisassociateIamInstanceProfile](#list_ec2-action-DisassociateIamInstanceProfile)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisassociateInstanceEventWindow **
- **IAM action:** [ec2:DisassociateInstanceEventWindow](#list_ec2-action-DisassociateInstanceEventWindow)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisassociateIpamByoasn **
- **IAM action:** [ec2:DisassociateIpamByoasn](#list_ec2-action-DisassociateIpamByoasn)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisassociateIpamResourceDiscovery **
- **IAM action:** [ec2:DisassociateIpamResourceDiscovery](#list_ec2-action-DisassociateIpamResourceDiscovery)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisassociateNatGatewayAddress **
- **IAM action:** [ec2:DisassociateNatGatewayAddress](#list_ec2-action-DisassociateNatGatewayAddress)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisassociateRouteServer **
- **IAM action:** [ec2:DisassociateRouteServer](#list_ec2-action-DisassociateRouteServer)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisassociateRouteTable **
- **IAM action:** [ec2:DisassociateRouteTable](#list_ec2-action-DisassociateRouteTable)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisassociateSecurityGroupVpc **
- **IAM action:** [ec2:DisassociateSecurityGroupVpc](#list_ec2-action-DisassociateSecurityGroupVpc)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisassociateSubnetCidrBlock **
- **IAM action:** [ec2:DisassociateSubnetCidrBlock](#list_ec2-action-DisassociateSubnetCidrBlock)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisassociateTransitGatewayMulticastDomain **
- **IAM action:** [ec2:DisassociateTransitGatewayMulticastDomain](#list_ec2-action-DisassociateTransitGatewayMulticastDomain)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisassociateTransitGatewayPolicyTable **
- **IAM action:** [ec2:DisassociateTransitGatewayPolicyTable](#list_ec2-action-DisassociateTransitGatewayPolicyTable)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisassociateTransitGatewayRouteTable **
- **IAM action:** [ec2:DisassociateTransitGatewayRouteTable](#list_ec2-action-DisassociateTransitGatewayRouteTable)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisassociateTrunkInterface **
- **IAM action:** [ec2:DisassociateTrunkInterface](#list_ec2-action-DisassociateTrunkInterface)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** DisassociateVpcCidrBlock **
- **IAM action:** [ec2:DisassociateVpcCidrBlock](#list_ec2-action-DisassociateVpcCidrBlock)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** EnableAddressTransfer **
- **IAM action:** [ec2:EnableAddressTransfer](#list_ec2-action-EnableAddressTransfer)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** EnableAllowedImagesSettings **
- **IAM action:** [ec2:EnableAllowedImagesSettings](#list_ec2-action-EnableAllowedImagesSettings)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** EnableAwsNetworkPerformanceMetricSubscription **
- **IAM action:** [ec2:EnableAwsNetworkPerformanceMetricSubscription](#list_ec2-action-EnableAwsNetworkPerformanceMetricSubscription)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** EnableCapacityManager **
- **IAM action:** [ec2:EnableCapacityManager](#list_ec2-action-EnableCapacityManager)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** EnableEbsEncryptionByDefault **
- **IAM action:** [ec2:EnableEbsEncryptionByDefault](#list_ec2-action-EnableEbsEncryptionByDefault)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** EnableFastLaunch **
- **IAM action:** [ec2:EnableFastLaunch](#list_ec2-action-EnableFastLaunch)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** EnableFastSnapshotRestores **
- **IAM action:** [ec2:EnableFastSnapshotRestores](#list_ec2-action-EnableFastSnapshotRestores)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** EnableImage **
- **IAM action:** [ec2:EnableImage](#list_ec2-action-EnableImage)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** EnableImageBlockPublicAccess **
- **IAM action:** [ec2:EnableImageBlockPublicAccess](#list_ec2-action-EnableImageBlockPublicAccess)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Permissions management, Write
- ** EnableImageDeprecation **
- **IAM action:** [ec2:EnableImageDeprecation](#list_ec2-action-EnableImageDeprecation)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** EnableImageDeregistrationProtection **
- **IAM action:** [ec2:EnableImageDeregistrationProtection](#list_ec2-action-EnableImageDeregistrationProtection)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** EnableInstanceSqlHaStandbyDetections **
- **IAM action:** [ec2:EnableInstanceSqlHaStandbyDetections](#list_ec2-action-EnableInstanceSqlHaStandbyDetections)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** EnableIpamOrganizationAdminAccount **
- **IAM action:** [ec2:EnableIpamOrganizationAdminAccount](#list_ec2-action-EnableIpamOrganizationAdminAccount)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** EnableIpamPolicy **
- **IAM action:** [ec2:EnableIpamPolicy](#list_ec2-action-EnableIpamPolicy)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** EnableReachabilityAnalyzerOrganizationSharing **
- **IAM action:** [ec2:EnableReachabilityAnalyzerOrganizationSharing](#list_ec2-action-EnableReachabilityAnalyzerOrganizationSharing)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** EnableRouteServerPropagation **
- **IAM action:** [ec2:EnableRouteServerPropagation](#list_ec2-action-EnableRouteServerPropagation)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** EnableSerialConsoleAccess **
- **IAM action:** [ec2:EnableSerialConsoleAccess](#list_ec2-action-EnableSerialConsoleAccess)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** EnableSnapshotBlockPublicAccess **
- **IAM action:** [ec2:EnableSnapshotBlockPublicAccess](#list_ec2-action-EnableSnapshotBlockPublicAccess)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Permissions management, Write
- ** EnableTransitGatewayRouteTablePropagation **
- **IAM action:** [ec2:EnableTransitGatewayRouteTablePropagation](#list_ec2-action-EnableTransitGatewayRouteTablePropagation)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** EnableVgwRoutePropagation **
- **IAM action:** [ec2:EnableVgwRoutePropagation](#list_ec2-action-EnableVgwRoutePropagation)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** EnableVolumeIO **
- **IAM action:** [ec2:EnableVolumeIO](#list_ec2-action-EnableVolumeIO)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** EnableVpcClassicLink **
- **IAM action:** [ec2:EnableVpcClassicLink](#list_ec2-action-EnableVpcClassicLink)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** EnableVpcClassicLinkDnsSupport **
- **IAM action:** [ec2:EnableVpcClassicLinkDnsSupport](#list_ec2-action-EnableVpcClassicLinkDnsSupport)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ExportClientVpnClientCertificateRevocationList **
- **IAM action:** [ec2:ExportClientVpnClientCertificateRevocationList](#list_ec2-action-ExportClientVpnClientCertificateRevocationList)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** ExportClientVpnClientConfiguration **
- **IAM action:** [ec2:ExportClientVpnClientConfiguration](#list_ec2-action-ExportClientVpnClientConfiguration)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** ExportImage **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:ExportImage](#list_ec2-action-ExportImage) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** ExportTransitGatewayRoutes **
- **IAM action:** [ec2:ExportTransitGatewayRoutes](#list_ec2-action-ExportTransitGatewayRoutes)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ExportVerifiedAccessInstanceClientConfiguration **
- **IAM action:** [ec2:ExportVerifiedAccessInstanceClientConfiguration](#list_ec2-action-ExportVerifiedAccessInstanceClientConfiguration)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetActiveVpnTunnelStatus **
- **IAM action:** [ec2:GetActiveVpnTunnelStatus](#list_ec2-action-GetActiveVpnTunnelStatus)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetAllowedImagesSettings **
- **IAM action:** [ec2:GetAllowedImagesSettings](#list_ec2-action-GetAllowedImagesSettings)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetAssociatedEnclaveCertificateIamRoles **
- **IAM action:** [ec2:GetAssociatedEnclaveCertificateIamRoles](#list_ec2-action-GetAssociatedEnclaveCertificateIamRoles)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetAssociatedIpv6PoolCidrs **
- **IAM action:** [ec2:GetAssociatedIpv6PoolCidrs](#list_ec2-action-GetAssociatedIpv6PoolCidrs)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetAwsNetworkPerformanceData **
- **IAM action:** [ec2:GetAwsNetworkPerformanceData](#list_ec2-action-GetAwsNetworkPerformanceData)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetCapacityManagerAttributes **
- **IAM action:** [ec2:GetCapacityManagerAttributes](#list_ec2-action-GetCapacityManagerAttributes)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetCapacityManagerMetricData **
- **IAM action:** [ec2:GetCapacityManagerMetricData](#list_ec2-action-GetCapacityManagerMetricData)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetCapacityManagerMetricDimensions **
- **IAM action:** [ec2:GetCapacityManagerMetricDimensions](#list_ec2-action-GetCapacityManagerMetricDimensions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetCapacityManagerMonitoredTagKeys **
- **IAM action:** [ec2:GetCapacityManagerMonitoredTagKeys](#list_ec2-action-GetCapacityManagerMonitoredTagKeys)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** GetCapacityReservationUsage **
- **IAM action:** [ec2:GetCapacityReservationUsage](#list_ec2-action-GetCapacityReservationUsage)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetCoipPoolUsage **
- **IAM action:** [ec2:GetCoipPoolUsage](#list_ec2-action-GetCoipPoolUsage)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetConsoleOutput **
- **IAM action:** [ec2:GetConsoleOutput](#list_ec2-action-GetConsoleOutput)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetConsoleScreenshot **
- **IAM action:** [ec2:GetConsoleScreenshot](#list_ec2-action-GetConsoleScreenshot)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetDeclarativePoliciesReportSummary **
- **IAM action:** [ec2:GetDeclarativePoliciesReportSummary](#list_ec2-action-GetDeclarativePoliciesReportSummary)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetDefaultCreditSpecification **
- **IAM action:** [ec2:GetDefaultCreditSpecification](#list_ec2-action-GetDefaultCreditSpecification)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetEbsDefaultKmsKeyId **
- **IAM action:** [ec2:GetEbsDefaultKmsKeyId](#list_ec2-action-GetEbsDefaultKmsKeyId)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetEbsEncryptionByDefault **
- **IAM action:** [ec2:GetEbsEncryptionByDefault](#list_ec2-action-GetEbsEncryptionByDefault)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetEnabledIpamPolicy **
- **IAM action:** [ec2:GetEnabledIpamPolicy](#list_ec2-action-GetEnabledIpamPolicy)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetFlowLogsIntegrationTemplate **
- **IAM action:** [ec2:GetFlowLogsIntegrationTemplate](#list_ec2-action-GetFlowLogsIntegrationTemplate)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetGroupsForCapacityReservation **
- **IAM action:** [ec2:GetGroupsForCapacityReservation](#list_ec2-action-GetGroupsForCapacityReservation)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** GetHostReservationPurchasePreview **
- **IAM action:** [ec2:GetHostReservationPurchasePreview](#list_ec2-action-GetHostReservationPurchasePreview)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetImageAncestry **
- **IAM action:** [ec2:GetImageAncestry](#list_ec2-action-GetImageAncestry)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetImageBlockPublicAccessState **
- **IAM action:** [ec2:GetImageBlockPublicAccessState](#list_ec2-action-GetImageBlockPublicAccessState)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetInstanceMetadataDefaults **
- **IAM action:** [ec2:GetInstanceMetadataDefaults](#list_ec2-action-GetInstanceMetadataDefaults)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** GetInstanceTpmEkPub **
- **IAM action:** [ec2:GetInstanceTpmEkPub](#list_ec2-action-GetInstanceTpmEkPub)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetInstanceTypesFromInstanceRequirements **
- **IAM action:** [ec2:GetInstanceTypesFromInstanceRequirements](#list_ec2-action-GetInstanceTypesFromInstanceRequirements)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** GetInstanceUefiData **
- **IAM action:** [ec2:GetInstanceUefiData](#list_ec2-action-GetInstanceUefiData)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetIpamAddressHistory **
- **IAM action:** [ec2:GetIpamAddressHistory](#list_ec2-action-GetIpamAddressHistory)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetIpamDiscoveredAccounts **
- **IAM action:** [ec2:GetIpamDiscoveredAccounts](#list_ec2-action-GetIpamDiscoveredAccounts)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetIpamDiscoveredPublicAddresses **
- **IAM action:** [ec2:GetIpamDiscoveredPublicAddresses](#list_ec2-action-GetIpamDiscoveredPublicAddresses)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetIpamDiscoveredResourceCidrs **
- **IAM action:** [ec2:GetIpamDiscoveredResourceCidrs](#list_ec2-action-GetIpamDiscoveredResourceCidrs)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetIpamPolicyAllocationRules **
- **IAM action:** [ec2:GetIpamPolicyAllocationRules](#list_ec2-action-GetIpamPolicyAllocationRules)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** GetIpamPolicyOrganizationTargets **
- **IAM action:** [ec2:GetIpamPolicyOrganizationTargets](#list_ec2-action-GetIpamPolicyOrganizationTargets)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** GetIpamPoolAllocations **
- **IAM action:** [ec2:GetIpamPoolAllocations](#list_ec2-action-GetIpamPoolAllocations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** GetIpamPoolCidrs **
- **IAM action:** [ec2:GetIpamPoolCidrs](#list_ec2-action-GetIpamPoolCidrs)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetIpamPrefixListResolverRules **
- **IAM action:** [ec2:GetIpamPrefixListResolverRules](#list_ec2-action-GetIpamPrefixListResolverRules)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetIpamPrefixListResolverVersionEntries **
- **IAM action:** [ec2:GetIpamPrefixListResolverVersionEntries](#list_ec2-action-GetIpamPrefixListResolverVersionEntries)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetIpamPrefixListResolverVersions **
- **IAM action:** [ec2:GetIpamPrefixListResolverVersions](#list_ec2-action-GetIpamPrefixListResolverVersions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetIpamResourceCidrs **
- **IAM action:** [ec2:GetIpamResourceCidrs](#list_ec2-action-GetIpamResourceCidrs)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetLaunchTemplateData **
- **IAM action:** [ec2:GetLaunchTemplateData](#list_ec2-action-GetLaunchTemplateData)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetManagedPrefixListAssociations **
- **IAM action:** [ec2:GetManagedPrefixListAssociations](#list_ec2-action-GetManagedPrefixListAssociations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetManagedPrefixListEntries **
- **IAM action:** [ec2:GetManagedPrefixListEntries](#list_ec2-action-GetManagedPrefixListEntries)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetManagedResourceVisibility **
- **IAM action:** [ec2:GetManagedResourceVisibility](#list_ec2-action-GetManagedResourceVisibility)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** GetNetworkInsightsAccessScopeAnalysisFindings **
- **IAM action:** [ec2:GetNetworkInsightsAccessScopeAnalysisFindings](#list_ec2-action-GetNetworkInsightsAccessScopeAnalysisFindings)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetNetworkInsightsAccessScopeContent **
- **IAM action:** [ec2:GetNetworkInsightsAccessScopeContent](#list_ec2-action-GetNetworkInsightsAccessScopeContent)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetPasswordData **
- **IAM action:** [ec2:GetPasswordData](#list_ec2-action-GetPasswordData)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetReservedInstancesExchangeQuote **
- **IAM action:** [ec2:GetReservedInstancesExchangeQuote](#list_ec2-action-GetReservedInstancesExchangeQuote)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetRouteServerAssociations **
- **IAM action:** [ec2:GetRouteServerAssociations](#list_ec2-action-GetRouteServerAssociations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetRouteServerPropagations **
- **IAM action:** [ec2:GetRouteServerPropagations](#list_ec2-action-GetRouteServerPropagations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetRouteServerRoutingDatabase **
- **IAM action:** [ec2:GetRouteServerRoutingDatabase](#list_ec2-action-GetRouteServerRoutingDatabase)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetSecurityGroupsForVpc **
- **IAM action:** [ec2:GetSecurityGroupsForVpc](#list_ec2-action-GetSecurityGroupsForVpc)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetSerialConsoleAccessStatus **
- **IAM action:** [ec2:GetSerialConsoleAccessStatus](#list_ec2-action-GetSerialConsoleAccessStatus)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetSnapshotBlockPublicAccessState **
- **IAM action:** [ec2:GetSnapshotBlockPublicAccessState](#list_ec2-action-GetSnapshotBlockPublicAccessState)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetSpotPlacementScores **
- **IAM action:** [ec2:GetSpotPlacementScores](#list_ec2-action-GetSpotPlacementScores)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetSubnetCidrReservations **
- **IAM action:** [ec2:GetSubnetCidrReservations](#list_ec2-action-GetSubnetCidrReservations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Read
- ** GetTransitGatewayAttachmentPropagations **
- **IAM action:** [ec2:GetTransitGatewayAttachmentPropagations](#list_ec2-action-GetTransitGatewayAttachmentPropagations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** GetTransitGatewayMeteringPolicyEntries **
- **IAM action:** [ec2:GetTransitGatewayMeteringPolicyEntries](#list_ec2-action-GetTransitGatewayMeteringPolicyEntries)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** GetTransitGatewayMulticastDomainAssociations **
- **IAM action:** [ec2:GetTransitGatewayMulticastDomainAssociations](#list_ec2-action-GetTransitGatewayMulticastDomainAssociations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** GetTransitGatewayPolicyTableAssociations **
- **IAM action:** [ec2:GetTransitGatewayPolicyTableAssociations](#list_ec2-action-GetTransitGatewayPolicyTableAssociations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** GetTransitGatewayPolicyTableEntries **
- **IAM action:** [ec2:GetTransitGatewayPolicyTableEntries](#list_ec2-action-GetTransitGatewayPolicyTableEntries)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** GetTransitGatewayPrefixListReferences **
- **IAM action:** [ec2:GetTransitGatewayPrefixListReferences](#list_ec2-action-GetTransitGatewayPrefixListReferences)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** GetTransitGatewayRouteTableAssociations **
- **IAM action:** [ec2:GetTransitGatewayRouteTableAssociations](#list_ec2-action-GetTransitGatewayRouteTableAssociations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** GetTransitGatewayRouteTablePropagations **
- **IAM action:** [ec2:GetTransitGatewayRouteTablePropagations](#list_ec2-action-GetTransitGatewayRouteTablePropagations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** GetVerifiedAccessEndpointPolicy **
- **IAM action:** [ec2:GetVerifiedAccessEndpointPolicy](#list_ec2-action-GetVerifiedAccessEndpointPolicy)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** GetVerifiedAccessEndpointTargets **
- **IAM action:** [ec2:GetVerifiedAccessEndpointTargets](#list_ec2-action-GetVerifiedAccessEndpointTargets)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** GetVerifiedAccessGroupPolicy **
- **IAM action:** [ec2:GetVerifiedAccessGroupPolicy](#list_ec2-action-GetVerifiedAccessGroupPolicy)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** GetVpcResourcesBlockingEncryptionEnforcement **
- **IAM action:** [ec2:GetVpcResourcesBlockingEncryptionEnforcement](#list_ec2-action-GetVpcResourcesBlockingEncryptionEnforcement)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** GetVpnConnectionDeviceSampleConfiguration **
- **IAM action:** [ec2:GetVpnConnectionDeviceSampleConfiguration](#list_ec2-action-GetVpnConnectionDeviceSampleConfiguration)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** GetVpnConnectionDeviceTypes **
- **IAM action:** [ec2:GetVpnConnectionDeviceTypes](#list_ec2-action-GetVpnConnectionDeviceTypes)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** GetVpnTunnelReplacementStatus **
- **IAM action:** [ec2:GetVpnTunnelReplacementStatus](#list_ec2-action-GetVpnTunnelReplacementStatus)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** ImportClientVpnClientCertificateRevocationList **
- **IAM action:** [ec2:ImportClientVpnClientCertificateRevocationList](#list_ec2-action-ImportClientVpnClientCertificateRevocationList)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ImportImage **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:ImportImage](#list_ec2-action-ImportImage) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** ImportInstance **
- **IAM action:** [ec2:ImportInstance](#list_ec2-action-ImportInstance)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ImportKeyPair **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:ImportKeyPair](#list_ec2-action-ImportKeyPair) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** ImportSnapshot **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:ImportSnapshot](#list_ec2-action-ImportSnapshot) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** ImportVolume **
- **IAM action:** [ec2:ImportVolume](#list_ec2-action-ImportVolume)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ListImagesInRecycleBin **
- **IAM action:** [ec2:ListImagesInRecycleBin](#list_ec2-action-ListImagesInRecycleBin)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** ListSnapshotsInRecycleBin **
- **IAM action:** [ec2:ListSnapshotsInRecycleBin](#list_ec2-action-ListSnapshotsInRecycleBin)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** ListVolumesInRecycleBin **
- **IAM action:** [ec2:ListVolumesInRecycleBin](#list_ec2-action-ListVolumesInRecycleBin)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** LockSnapshot **
- **IAM action:** [ec2:LockSnapshot](#list_ec2-action-LockSnapshot)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyAddressAttribute **
- **IAM action:** [ec2:ModifyAddressAttribute](#list_ec2-action-ModifyAddressAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyAvailabilityZoneGroup **
- **IAM action:** [ec2:ModifyAvailabilityZoneGroup](#list_ec2-action-ModifyAvailabilityZoneGroup)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyCapacityReservation **
- **IAM action:** [ec2:ModifyCapacityReservation](#list_ec2-action-ModifyCapacityReservation)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyCapacityReservationFleet **
- **IAM action:** [ec2:ModifyCapacityReservationFleet](#list_ec2-action-ModifyCapacityReservationFleet)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyClientVpnEndpoint **
- **IAM action:** [ec2:ModifyClientVpnEndpoint](#list_ec2-action-ModifyClientVpnEndpoint)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyDefaultCreditSpecification **
- **IAM action:** [ec2:ModifyDefaultCreditSpecification](#list_ec2-action-ModifyDefaultCreditSpecification)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyEbsDefaultKmsKeyId **
- **IAM action:** [ec2:ModifyEbsDefaultKmsKeyId](#list_ec2-action-ModifyEbsDefaultKmsKeyId)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyFleet **
- **IAM action:** [ec2:ModifyFleet](#list_ec2-action-ModifyFleet)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyFpgaImageAttribute **
- **IAM action:** [ec2:ModifyFpgaImageAttribute](#list_ec2-action-ModifyFpgaImageAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyHosts **
- **IAM action:** [ec2:ModifyHosts](#list_ec2-action-ModifyHosts)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyIdFormat **
- **IAM action:** [ec2:ModifyIdFormat](#list_ec2-action-ModifyIdFormat)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyIdentityIdFormat **
- **IAM action:** [ec2:ModifyIdentityIdFormat](#list_ec2-action-ModifyIdentityIdFormat)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyImageAttribute **
- **IAM action:** [ec2:ModifyImageAttribute](#list_ec2-action-ModifyImageAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyInstanceAttribute **
- **IAM action:** [ec2:ModifyInstanceAttribute](#list_ec2-action-ModifyInstanceAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyInstanceCapacityReservationAttributes **
- **IAM action:** [ec2:ModifyInstanceCapacityReservationAttributes](#list_ec2-action-ModifyInstanceCapacityReservationAttributes)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyInstanceConnectEndpoint **
- **IAM action:** [ec2:ModifyInstanceConnectEndpoint](#list_ec2-action-ModifyInstanceConnectEndpoint)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyInstanceCpuOptions **
- **IAM action:** [ec2:ModifyInstanceCpuOptions](#list_ec2-action-ModifyInstanceCpuOptions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyInstanceCreditSpecification **
- **IAM action:** [ec2:ModifyInstanceCreditSpecification](#list_ec2-action-ModifyInstanceCreditSpecification)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyInstanceEventStartTime **
- **IAM action:** [ec2:ModifyInstanceEventStartTime](#list_ec2-action-ModifyInstanceEventStartTime)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyInstanceEventWindow **
- **IAM action:** [ec2:ModifyInstanceEventWindow](#list_ec2-action-ModifyInstanceEventWindow)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyInstanceMaintenanceOptions **
- **IAM action:** [ec2:ModifyInstanceMaintenanceOptions](#list_ec2-action-ModifyInstanceMaintenanceOptions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyInstanceMetadataDefaults **
- **IAM action:** [ec2:ModifyInstanceMetadataDefaults](#list_ec2-action-ModifyInstanceMetadataDefaults)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyInstanceMetadataOptions **
- **IAM action:** [ec2:ModifyInstanceMetadataOptions](#list_ec2-action-ModifyInstanceMetadataOptions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyInstanceNetworkPerformanceOptions **
- **IAM action:** [ec2:ModifyInstanceNetworkPerformanceOptions](#list_ec2-action-ModifyInstanceNetworkPerformanceOptions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyInstancePlacement **
- **IAM action:** [ec2:ModifyInstancePlacement](#list_ec2-action-ModifyInstancePlacement)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyIpam **
- **IAM action:** [ec2:ModifyIpam](#list_ec2-action-ModifyIpam)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyIpamPolicyAllocationRules **
- **IAM action:** [ec2:ModifyIpamPolicyAllocationRules](#list_ec2-action-ModifyIpamPolicyAllocationRules)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyIpamPool **
- **IAM action:** [ec2:ModifyIpamPool](#list_ec2-action-ModifyIpamPool)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyIpamPoolAllocation **
- **IAM action:** [ec2:ModifyIpamPoolAllocation](#list_ec2-action-ModifyIpamPoolAllocation)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyIpamPrefixListResolver **
- **IAM action:** [ec2:ModifyIpamPrefixListResolver](#list_ec2-action-ModifyIpamPrefixListResolver)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyIpamPrefixListResolverTarget **
- **IAM action:** [ec2:ModifyIpamPrefixListResolverTarget](#list_ec2-action-ModifyIpamPrefixListResolverTarget)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyIpamResourceCidr **
- **IAM action:** [ec2:ModifyIpamResourceCidr](#list_ec2-action-ModifyIpamResourceCidr)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyIpamResourceDiscovery **
- **IAM action:** [ec2:ModifyIpamResourceDiscovery](#list_ec2-action-ModifyIpamResourceDiscovery)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyIpamScope **
- **IAM action:** [ec2:ModifyIpamScope](#list_ec2-action-ModifyIpamScope)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyLaunchTemplate **
- **IAM action:** [ec2:ModifyLaunchTemplate](#list_ec2-action-ModifyLaunchTemplate)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyLocalGatewayRoute **
- **IAM action:** [ec2:ModifyLocalGatewayRoute](#list_ec2-action-ModifyLocalGatewayRoute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyManagedPrefixList **
- **IAM action:** [ec2:ModifyManagedPrefixList](#list_ec2-action-ModifyManagedPrefixList)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyManagedResourceVisibility **
- **IAM action:** [ec2:ModifyManagedResourceVisibility](#list_ec2-action-ModifyManagedResourceVisibility)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyNetworkInterfaceAttribute **
- **IAM action:** [ec2:ModifyNetworkInterfaceAttribute](#list_ec2-action-ModifyNetworkInterfaceAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyPrivateDnsNameOptions **
- **IAM action:** [ec2:ModifyPrivateDnsNameOptions](#list_ec2-action-ModifyPrivateDnsNameOptions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyPublicIpDnsNameOptions **
- **IAM action:** [ec2:ModifyPublicIpDnsNameOptions](#list_ec2-action-ModifyPublicIpDnsNameOptions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyReservedInstances **
- **IAM action:** [ec2:ModifyReservedInstances](#list_ec2-action-ModifyReservedInstances)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyRouteServer **
- **IAM action:** [ec2:ModifyRouteServer](#list_ec2-action-ModifyRouteServer)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifySecurityGroupRules **
- **IAM action:** [ec2:ModifySecurityGroupRules](#list_ec2-action-ModifySecurityGroupRules)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifySnapshotAttribute **
- **IAM action:** [ec2:ModifySnapshotAttribute](#list_ec2-action-ModifySnapshotAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Permissions management, Write
- ** ModifySnapshotTier **
- **IAM action:** [ec2:ModifySnapshotTier](#list_ec2-action-ModifySnapshotTier)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifySpotFleetRequest **
- **IAM action:** [ec2:ModifySpotFleetRequest](#list_ec2-action-ModifySpotFleetRequest)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifySubnetAttribute **
- **IAM action:** [ec2:ModifySubnetAttribute](#list_ec2-action-ModifySubnetAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyTrafficMirrorFilterNetworkServices **
- **IAM action:** [ec2:ModifyTrafficMirrorFilterNetworkServices](#list_ec2-action-ModifyTrafficMirrorFilterNetworkServices)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyTrafficMirrorFilterRule **
- **IAM action:** [ec2:ModifyTrafficMirrorFilterRule](#list_ec2-action-ModifyTrafficMirrorFilterRule)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyTrafficMirrorSession **
- **IAM action:** [ec2:ModifyTrafficMirrorSession](#list_ec2-action-ModifyTrafficMirrorSession)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyTransitGateway **
- **IAM action:** [ec2:ModifyTransitGateway](#list_ec2-action-ModifyTransitGateway)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyTransitGatewayMeteringPolicy **
- **IAM action:** [ec2:ModifyTransitGatewayMeteringPolicy](#list_ec2-action-ModifyTransitGatewayMeteringPolicy)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyTransitGatewayPrefixListReference **
- **IAM action:** [ec2:ModifyTransitGatewayPrefixListReference](#list_ec2-action-ModifyTransitGatewayPrefixListReference)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyTransitGatewayVpcAttachment **
- **IAM action:** [ec2:ModifyTransitGatewayVpcAttachment](#list_ec2-action-ModifyTransitGatewayVpcAttachment)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVerifiedAccessEndpoint **
- **IAM action:** [ec2:ModifyVerifiedAccessEndpoint](#list_ec2-action-ModifyVerifiedAccessEndpoint)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVerifiedAccessEndpointPolicy **
- **IAM action:** [ec2:ModifyVerifiedAccessEndpointPolicy](#list_ec2-action-ModifyVerifiedAccessEndpointPolicy)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVerifiedAccessGroup **
- **IAM action:** [ec2:ModifyVerifiedAccessGroup](#list_ec2-action-ModifyVerifiedAccessGroup)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVerifiedAccessGroupPolicy **
- **IAM action:** [ec2:ModifyVerifiedAccessGroupPolicy](#list_ec2-action-ModifyVerifiedAccessGroupPolicy)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVerifiedAccessInstance **
- **IAM action:** [ec2:ModifyVerifiedAccessInstance](#list_ec2-action-ModifyVerifiedAccessInstance)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVerifiedAccessInstanceLoggingConfiguration **
- **IAM action:** [ec2:ModifyVerifiedAccessInstanceLoggingConfiguration](#list_ec2-action-ModifyVerifiedAccessInstanceLoggingConfiguration)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVerifiedAccessTrustProvider **
- **IAM action:** [ec2:ModifyVerifiedAccessTrustProvider](#list_ec2-action-ModifyVerifiedAccessTrustProvider)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVolume **
- **IAM action:** [ec2:ModifyVolume](#list_ec2-action-ModifyVolume)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVolumeAttribute **
- **IAM action:** [ec2:ModifyVolumeAttribute](#list_ec2-action-ModifyVolumeAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVpcAttribute **
- **IAM action:** [ec2:ModifyVpcAttribute](#list_ec2-action-ModifyVpcAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVpcBlockPublicAccessExclusion **
- **IAM action:** [ec2:ModifyVpcBlockPublicAccessExclusion](#list_ec2-action-ModifyVpcBlockPublicAccessExclusion)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVpcBlockPublicAccessOptions **
- **IAM action:** [ec2:ModifyVpcBlockPublicAccessOptions](#list_ec2-action-ModifyVpcBlockPublicAccessOptions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVpcEncryptionControl **
- **IAM action:** [ec2:ModifyVpcEncryptionControl](#list_ec2-action-ModifyVpcEncryptionControl)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVpcEndpoint **
- **IAM action:** [ec2:ModifyVpcEndpoint](#list_ec2-action-ModifyVpcEndpoint)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVpcEndpointConnectionNotification **
- **IAM action:** [ec2:ModifyVpcEndpointConnectionNotification](#list_ec2-action-ModifyVpcEndpointConnectionNotification)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVpcEndpointServiceConfiguration **
- **IAM action:** [ec2:ModifyVpcEndpointServiceConfiguration](#list_ec2-action-ModifyVpcEndpointServiceConfiguration)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVpcEndpointServicePayerResponsibility **
- **IAM action:** [ec2:ModifyVpcEndpointServicePayerResponsibility](#list_ec2-action-ModifyVpcEndpointServicePayerResponsibility)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVpcEndpointServicePermissions **
- **IAM action:** [ec2:ModifyVpcEndpointServicePermissions](#list_ec2-action-ModifyVpcEndpointServicePermissions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Permissions management, Write
- ** ModifyVpcPeeringConnectionOptions **
- **IAM action:** [ec2:ModifyVpcPeeringConnectionOptions](#list_ec2-action-ModifyVpcPeeringConnectionOptions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVpcTenancy **
- **IAM action:** [ec2:ModifyVpcTenancy](#list_ec2-action-ModifyVpcTenancy)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVpnConnection **
- **IAM action:** [ec2:ModifyVpnConnection](#list_ec2-action-ModifyVpnConnection)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVpnConnectionOptions **
- **IAM action:** [ec2:ModifyVpnConnectionOptions](#list_ec2-action-ModifyVpnConnectionOptions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVpnTunnelCertificate **
- **IAM action:** [ec2:ModifyVpnTunnelCertificate](#list_ec2-action-ModifyVpnTunnelCertificate)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ModifyVpnTunnelOptions **
- **IAM action:** [ec2:ModifyVpnTunnelOptions](#list_ec2-action-ModifyVpnTunnelOptions)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** MonitorInstances **
- **IAM action:** [ec2:MonitorInstances](#list_ec2-action-MonitorInstances)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** MoveByoipCidrToIpam **
- **IAM action:** [ec2:MoveByoipCidrToIpam](#list_ec2-action-MoveByoipCidrToIpam)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** MoveCapacityReservationInstances **
- **IAM action:** [ec2:MoveCapacityReservationInstances](#list_ec2-action-MoveCapacityReservationInstances)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ProvisionByoipCidr **
- **IAM action:** [ec2:ProvisionByoipCidr](#list_ec2-action-ProvisionByoipCidr)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ProvisionIpamByoasn **
- **IAM action:** [ec2:ProvisionIpamByoasn](#list_ec2-action-ProvisionIpamByoasn)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ProvisionIpamPoolCidr **
- **IAM action:** [ec2:ProvisionIpamPoolCidr](#list_ec2-action-ProvisionIpamPoolCidr)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ProvisionPublicIpv4PoolCidr **
- **IAM action:** [ec2:ProvisionPublicIpv4PoolCidr](#list_ec2-action-ProvisionPublicIpv4PoolCidr)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** PurchaseCapacityBlock **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:PurchaseCapacityBlock](#list_ec2-action-PurchaseCapacityBlock) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** PurchaseCapacityBlockExtension **
- **IAM action:** [ec2:PurchaseCapacityBlockExtension](#list_ec2-action-PurchaseCapacityBlockExtension)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** PurchaseHostReservation **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:PurchaseHostReservation](#list_ec2-action-PurchaseHostReservation) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** PurchaseReservedInstancesOffering **
- **IAM action:** [ec2:PurchaseReservedInstancesOffering](#list_ec2-action-PurchaseReservedInstancesOffering)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** PurchaseScheduledInstances **
- **IAM action:** [ec2:PurchaseScheduledInstances](#list_ec2-action-PurchaseScheduledInstances)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RebootInstances **
- **IAM action:** [ec2:RebootInstances](#list_ec2-action-RebootInstances)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RegisterImage **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:RegisterImage](#list_ec2-action-RegisterImage) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** RegisterInstanceEventNotificationAttributes **
- **IAM action:** [ec2:RegisterInstanceEventNotificationAttributes](#list_ec2-action-RegisterInstanceEventNotificationAttributes)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RegisterTransitGatewayMulticastGroupMembers **
- **IAM action:** [ec2:RegisterTransitGatewayMulticastGroupMembers](#list_ec2-action-RegisterTransitGatewayMulticastGroupMembers)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RegisterTransitGatewayMulticastGroupSources **
- **IAM action:** [ec2:RegisterTransitGatewayMulticastGroupSources](#list_ec2-action-RegisterTransitGatewayMulticastGroupSources)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RejectCapacityReservationBillingOwnership **
- **IAM action:** [ec2:RejectCapacityReservationBillingOwnership](#list_ec2-action-RejectCapacityReservationBillingOwnership)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RejectTransitGatewayClientVpnAttachment **
- **IAM action:** [ec2:RejectTransitGatewayClientVpnAttachment](#list_ec2-action-RejectTransitGatewayClientVpnAttachment)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RejectTransitGatewayMulticastDomainAssociations **
- **IAM action:** [ec2:RejectTransitGatewayMulticastDomainAssociations](#list_ec2-action-RejectTransitGatewayMulticastDomainAssociations)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RejectTransitGatewayPeeringAttachment **
- **IAM action:** [ec2:RejectTransitGatewayPeeringAttachment](#list_ec2-action-RejectTransitGatewayPeeringAttachment)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RejectTransitGatewayVpcAttachment **
- **IAM action:** [ec2:RejectTransitGatewayVpcAttachment](#list_ec2-action-RejectTransitGatewayVpcAttachment)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RejectVpcEndpointConnections **
- **IAM action:** [ec2:RejectVpcEndpointConnections](#list_ec2-action-RejectVpcEndpointConnections)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RejectVpcPeeringConnection **
- **IAM action:** [ec2:RejectVpcPeeringConnection](#list_ec2-action-RejectVpcPeeringConnection)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ReleaseAddress **
- **IAM action:** [ec2:ReleaseAddress](#list_ec2-action-ReleaseAddress)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ReleaseHosts **
- **IAM action:** [ec2:ReleaseHosts](#list_ec2-action-ReleaseHosts)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ReleaseIpamPoolAllocation **
- **IAM action:** [ec2:ReleaseIpamPoolAllocation](#list_ec2-action-ReleaseIpamPoolAllocation)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ReplaceIamInstanceProfileAssociation **
- **IAM action:** [ec2:ReplaceIamInstanceProfileAssociation](#list_ec2-action-ReplaceIamInstanceProfileAssociation) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [iam:PassRole](https://docs.amazonaws.cn/IAM/latest/UserGuide/id_roles_use_passrole.html) / **Condition key:** iam:PassedToService / **Possible value(s):** ec2.amazonaws.com / **Access level:** Write
- ** ReplaceImageCriteriaInAllowedImagesSettings **
- **IAM action:** [ec2:ReplaceImageCriteriaInAllowedImagesSettings](#list_ec2-action-ReplaceImageCriteriaInAllowedImagesSettings)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ReplaceNetworkAclAssociation **
- **IAM action:** [ec2:ReplaceNetworkAclAssociation](#list_ec2-action-ReplaceNetworkAclAssociation)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ReplaceNetworkAclEntry **
- **IAM action:** [ec2:ReplaceNetworkAclEntry](#list_ec2-action-ReplaceNetworkAclEntry)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ReplaceRoute **
- **IAM action:** [ec2:ReplaceRoute](#list_ec2-action-ReplaceRoute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ReplaceRouteTableAssociation **
- **IAM action:** [ec2:ReplaceRouteTableAssociation](#list_ec2-action-ReplaceRouteTableAssociation)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ReplaceTransitGatewayRoute **
- **IAM action:** [ec2:ReplaceTransitGatewayRoute](#list_ec2-action-ReplaceTransitGatewayRoute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ReplaceVpnTunnel **
- **IAM action:** [ec2:ReplaceVpnTunnel](#list_ec2-action-ReplaceVpnTunnel)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ReportInstanceStatus **
- **IAM action:** [ec2:ReportInstanceStatus](#list_ec2-action-ReportInstanceStatus)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RequestSpotFleet **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:RequestSpotFleet](#list_ec2-action-RequestSpotFleet) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [iam:PassRole](https://docs.amazonaws.cn/IAM/latest/UserGuide/id_roles_use_passrole.html) / **Condition key:** iam:PassedToService / **Possible value(s):** ec2.amazonaws.com / **Access level:** Write
- ** RequestSpotInstances **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:RequestSpotInstances](#list_ec2-action-RequestSpotInstances) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [iam:PassRole](https://docs.amazonaws.cn/IAM/latest/UserGuide/id_roles_use_passrole.html) / **Condition key:** iam:PassedToService / **Possible value(s):** ec2.amazonaws.com / **Access level:** Write
- ** ResetAddressAttribute **
- **IAM action:** [ec2:ResetAddressAttribute](#list_ec2-action-ResetAddressAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ResetEbsDefaultKmsKeyId **
- **IAM action:** [ec2:ResetEbsDefaultKmsKeyId](#list_ec2-action-ResetEbsDefaultKmsKeyId)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ResetFpgaImageAttribute **
- **IAM action:** [ec2:ResetFpgaImageAttribute](#list_ec2-action-ResetFpgaImageAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ResetImageAttribute **
- **IAM action:** [ec2:ResetImageAttribute](#list_ec2-action-ResetImageAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ResetInstanceAttribute **
- **IAM action:** [ec2:ResetInstanceAttribute](#list_ec2-action-ResetInstanceAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ResetNetworkInterfaceAttribute **
- **IAM action:** [ec2:ResetNetworkInterfaceAttribute](#list_ec2-action-ResetNetworkInterfaceAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** ResetSnapshotAttribute **
- **IAM action:** [ec2:ResetSnapshotAttribute](#list_ec2-action-ResetSnapshotAttribute)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Permissions management, Write
- ** RestoreImageFromRecycleBin **
- **IAM action:** [ec2:RestoreImageFromRecycleBin](#list_ec2-action-RestoreImageFromRecycleBin)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RestoreManagedPrefixListVersion **
- **IAM action:** [ec2:RestoreManagedPrefixListVersion](#list_ec2-action-RestoreManagedPrefixListVersion)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RestoreSnapshotFromRecycleBin **
- **IAM action:** [ec2:RestoreSnapshotFromRecycleBin](#list_ec2-action-RestoreSnapshotFromRecycleBin)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RestoreSnapshotTier **
- **IAM action:** [ec2:RestoreSnapshotTier](#list_ec2-action-RestoreSnapshotTier)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RestoreVolumeFromRecycleBin **
- **IAM action:** [ec2:RestoreVolumeFromRecycleBin](#list_ec2-action-RestoreVolumeFromRecycleBin)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RevokeClientVpnIngress **
- **IAM action:** [ec2:RevokeClientVpnIngress](#list_ec2-action-RevokeClientVpnIngress)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RevokeSecurityGroupEgress **
- **IAM action:** [ec2:RevokeSecurityGroupEgress](#list_ec2-action-RevokeSecurityGroupEgress)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RevokeSecurityGroupIngress **
- **IAM action:** [ec2:RevokeSecurityGroupIngress](#list_ec2-action-RevokeSecurityGroupIngress)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** RunInstances **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:RunInstances](#list_ec2-action-RunInstances) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- **IAM action:** [iam:PassRole](https://docs.amazonaws.cn/IAM/latest/UserGuide/id_roles_use_passrole.html) / **Condition key:** iam:PassedToService / **Possible value(s):** ec2.amazonaws.com / **Access level:** Write
- ** RunScheduledInstances **
- **IAM action:** [ec2:RunScheduledInstances](#list_ec2-action-RunScheduledInstances)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** SearchLocalGatewayRoutes **
- **IAM action:** [ec2:SearchLocalGatewayRoutes](#list_ec2-action-SearchLocalGatewayRoutes)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** SearchTransitGatewayMulticastGroups **
- **IAM action:** [ec2:SearchTransitGatewayMulticastGroups](#list_ec2-action-SearchTransitGatewayMulticastGroups)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** SearchTransitGatewayRoutes **
- **IAM action:** [ec2:SearchTransitGatewayRoutes](#list_ec2-action-SearchTransitGatewayRoutes)
- **Condition key:**
- **Possible value(s):**
- **Access level:** List
- ** SendDiagnosticInterrupt **
- **IAM action:** [ec2:SendDiagnosticInterrupt](#list_ec2-action-SendDiagnosticInterrupt)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** StartDeclarativePoliciesReport **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:StartDeclarativePoliciesReport](#list_ec2-action-StartDeclarativePoliciesReport) / **Condition key:** / **Possible value(s):** / **Access level:** Read
- ** StartInstances **
- **IAM action:** [ec2:StartInstances](#list_ec2-action-StartInstances)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** StartNetworkInsightsAccessScopeAnalysis **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:StartNetworkInsightsAccessScopeAnalysis](#list_ec2-action-StartNetworkInsightsAccessScopeAnalysis) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** StartNetworkInsightsAnalysis **
- **IAM action:** [ec2:CreateTags](#list_ec2-action-CreateTags) / **Condition key:** / **Possible value(s):** / **Access level:** Tagging, Write
- **IAM action:** [ec2:StartNetworkInsightsAnalysis](#list_ec2-action-StartNetworkInsightsAnalysis) / **Condition key:** / **Possible value(s):** / **Access level:** Write
- ** StartVpcEndpointServicePrivateDnsVerification **
- **IAM action:** [ec2:StartVpcEndpointServicePrivateDnsVerification](#list_ec2-action-StartVpcEndpointServicePrivateDnsVerification)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** StopInstances **
- **IAM action:** [ec2:StopInstances](#list_ec2-action-StopInstances)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** TerminateClientVpnConnections **
- **IAM action:** [ec2:TerminateClientVpnConnections](#list_ec2-action-TerminateClientVpnConnections)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** TerminateInstances **
- **IAM action:** [ec2:TerminateInstances](#list_ec2-action-TerminateInstances)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** UnassignIpv6Addresses **
- **IAM action:** [ec2:UnassignIpv6Addresses](#list_ec2-action-UnassignIpv6Addresses)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** UnassignPrivateIpAddresses **
- **IAM action:** [ec2:UnassignPrivateIpAddresses](#list_ec2-action-UnassignPrivateIpAddresses)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** UnassignPrivateNatGatewayAddress **
- **IAM action:** [ec2:UnassignPrivateNatGatewayAddress](#list_ec2-action-UnassignPrivateNatGatewayAddress)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** UnlockSnapshot **
- **IAM action:** [ec2:UnlockSnapshot](#list_ec2-action-UnlockSnapshot)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** UnmonitorInstances **
- **IAM action:** [ec2:UnmonitorInstances](#list_ec2-action-UnmonitorInstances)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** UpdateCapacityManagerMonitoredTagKeys **
- **IAM action:** [ec2:UpdateCapacityManagerMonitoredTagKeys](#list_ec2-action-UpdateCapacityManagerMonitoredTagKeys)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** UpdateCapacityManagerOrganizationsAccess **
- **IAM action:** [ec2:UpdateCapacityManagerOrganizationsAccess](#list_ec2-action-UpdateCapacityManagerOrganizationsAccess)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** UpdateInterruptibleCapacityReservationAllocation **
- **IAM action:** [ec2:UpdateInterruptibleCapacityReservationAllocation](#list_ec2-action-UpdateInterruptibleCapacityReservationAllocation)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** UpdateSecurityGroupRuleDescriptionsEgress **
- **IAM action:** [ec2:UpdateSecurityGroupRuleDescriptionsEgress](#list_ec2-action-UpdateSecurityGroupRuleDescriptionsEgress)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** UpdateSecurityGroupRuleDescriptionsIngress **
- **IAM action:** [ec2:UpdateSecurityGroupRuleDescriptionsIngress](#list_ec2-action-UpdateSecurityGroupRuleDescriptionsIngress)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
- ** WithdrawByoipCidr **
- **IAM action:** [ec2:WithdrawByoipCidr](#list_ec2-action-WithdrawByoipCidr)
- **Condition key:**
- **Possible value(s):**
- **Access level:** Write
## Actions defined by Amazon EC2
You can specify the following actions in the `Action` element of an IAM policy statement. Use policies to grant permissions to perform an operation in Amazon. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.
****
- ** [AcceptAddressTransfer](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AcceptAddressTransfer.html) **
- **Description:** Grants permission to accept an Elastic IP address transfer
- **Resource types (\*required):** [elastic-ip\*](#list_ec2-resource-elastic-ip)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AllocationId](#list_ec2-ec2_AllocationId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Domain](#list_ec2-ec2_Domain)
[ec2:PublicIpAddress](#list_ec2-ec2_PublicIpAddress)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [AcceptCapacityReservationBillingOwnership](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AcceptCapacityReservationBillingOwnership.html) **
- **Description:** Grants permission to accept assign billing of the available capacity of a shared Capacity Reservation to the calling account
- **Resource types (\*required):** [capacity-reservation\*](#list_ec2-resource-capacity-reservation)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CapacityReservationFleet](#list_ec2-ec2_CapacityReservationFleet)
[ec2:CommitmentDuration](#list_ec2-ec2_CommitmentDuration)
[ec2:CreateDate](#list_ec2-ec2_CreateDate)
[ec2:DestinationCapacityReservationId](#list_ec2-ec2_DestinationCapacityReservationId)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:EndDate](#list_ec2-ec2_EndDate)
[ec2:EndDateType](#list_ec2-ec2_EndDateType)
[ec2:EphemeralStorage](#list_ec2-ec2_EphemeralStorage)
[ec2:InstanceCount](#list_ec2-ec2_InstanceCount)
[ec2:InstanceMatchCriteria](#list_ec2-ec2_InstanceMatchCriteria)
[ec2:InstancePlatform](#list_ec2-ec2_InstancePlatform)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:InterruptibleCapacityReservationId](#list_ec2-ec2_InterruptibleCapacityReservationId)
[ec2:InterruptionType](#list_ec2-ec2_InterruptionType)
[ec2:IsInterruptible](#list_ec2-ec2_IsInterruptible)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SourceCapacityReservationId](#list_ec2-ec2_SourceCapacityReservationId)
[ec2:TargetInstanceCount](#list_ec2-ec2_TargetInstanceCount)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [AcceptReservedInstancesExchangeQuote](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AcceptReservedInstancesExchangeQuote.html) **
- **Description:** Grants permission to accept a Convertible Reserved Instance exchange quote
- **Resource types (\*required):** [reserved-instances\*](#list_ec2-resource-reserved-instances)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ReservedInstancesOfferingType](#list_ec2-ec2_ReservedInstancesOfferingType)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [AcceptTransitGatewayClientVpnAttachment](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AcceptTransitGatewayClientVpnAttachment.html) **
- **Description:** Grants permission to accept a transit gateway attachment request for a Client VPN endpoint
- **Resource types (\*required):** [transit-gateway-attachment\*](#list_ec2-resource-transit-gateway-attachment)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Access level:** Write
- ** [AcceptTransitGatewayMulticastDomainAssociations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AcceptTransitGatewayMulticastDomainAssociations.html) **
- **Description:** Grants permission to accept a request to associate subnets with a transit gateway multicast domain
- **Resource types (\*required):** [transit-gateway-attachment](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [transit-gateway-multicast-domain](#list_ec2-resource-transit-gateway-multicast-domain) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMulticastDomainId](#list_ec2-ec2_transitGatewayMulticastDomainId)
- **Access level:** Write
- ** [AcceptTransitGatewayPeeringAttachment](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AcceptTransitGatewayPeeringAttachment.html) **
- **Description:** Grants permission to accept a transit gateway peering attachment request
- **Resource types (\*required):** [transit-gateway-attachment\*](#list_ec2-resource-transit-gateway-attachment)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Access level:** Write
- ** [AcceptTransitGatewayVpcAttachment](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AcceptTransitGatewayVpcAttachment.html) **
- **Description:** Grants permission to accept a request to attach a VPC to a transit gateway
- **Resource types (\*required):** [transit-gateway-attachment\*](#list_ec2-resource-transit-gateway-attachment)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Access level:** Write
- ** [AcceptVpcEndpointConnections](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AcceptVpcEndpointConnections.html) **
- **Description:** Grants permission to accept one or more interface VPC endpoint connections to your VPC endpoint service
- **Resource types (\*required):** [vpc-endpoint-service\*](#list_ec2-resource-vpc-endpoint-service)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpceServicePrivateDnsName](#list_ec2-ec2_VpceServicePrivateDnsName)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
[ec2:VpceSupportedRegion](#list_ec2-ec2_VpceSupportedRegion)
- **Access level:** Write
- ** [AcceptVpcPeeringConnection](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AcceptVpcPeeringConnection.html) **
- **Description:** Grants permission to accept a VPC peering connection request
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Resource types (\*required):** [vpc-peering-connection\*](#list_ec2-resource-vpc-peering-connection) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AccepterVpc](#list_ec2-ec2_AccepterVpc)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RequesterVpc](#list_ec2-ec2_RequesterVpc)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpcPeeringConnectionID](#list_ec2-ec2_VpcPeeringConnectionID)
- **Access level:** Write
- ** [AdvertiseByoipCidr](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AdvertiseByoipCidr.html) **
- **Description:** Grants permission to advertise an IP address range that is provisioned for use in Amazon through bring your own IP addresses (BYOIP)
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [AllocateAddress](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AllocateAddress.html) **
- **Description:** Grants permission to allocate an Elastic IP address (EIP) to your account
- **Resource types (\*required):** [elastic-ip\*](#list_ec2-resource-elastic-ip) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AllocationId](#list_ec2-ec2_AllocationId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Domain](#list_ec2-ec2_Domain)
[ec2:PublicIpAddress](#list_ec2-ec2_PublicIpAddress)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-pool](#list_ec2-resource-ipam-pool) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipv4pool-ec2](#list_ec2-resource-ipv4pool-ec2) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [AllocateHosts](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AllocateHosts.html) **
- **Description:** Grants permission to allocate a Dedicated Host to your account
- **Resource types (\*required):** [dedicated-host\*](#list_ec2-resource-dedicated-host)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AutoPlacement](#list_ec2-ec2_AutoPlacement)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:HostRecovery](#list_ec2-ec2_HostRecovery)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Quantity](#list_ec2-ec2_Quantity)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [AllocateIpamPoolCidr](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AllocateIpamPoolCidr.html) **
- **Description:** Grants permission to allocate a CIDR from an Amazon VPC IP Address Manager (IPAM) pool
- **Resource types (\*required):** [ipam-pool\*](#list_ec2-resource-ipam-pool) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-pool-allocation](#list_ec2-resource-ipam-pool-allocation) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ApplySecurityGroupsToClientVpnTargetNetwork](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ApplySecurityGroupsToClientVpnTargetNetwork.html) **
- **Description:** Grants permission to apply a security group to the association between a Client VPN endpoint and a target network
- **Resource types (\*required):** [client-vpn-endpoint\*](#list_ec2-resource-client-vpn-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ClientRootCertificateChainArn](#list_ec2-ec2_ClientRootCertificateChainArn)
[ec2:CloudwatchLogGroupArn](#list_ec2-ec2_CloudwatchLogGroupArn)
[ec2:CloudwatchLogStreamArn](#list_ec2-ec2_CloudwatchLogStreamArn)
[ec2:DirectoryArn](#list_ec2-ec2_DirectoryArn)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SamlProviderArn](#list_ec2-ec2_SamlProviderArn)
[ec2:ServerCertificateArn](#list_ec2-ec2_ServerCertificateArn)
- **Resource types (\*required):** [security-group\*](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [AssignIpv6Addresses](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AssignIpv6Addresses.html) **
- **Description:** Grants permission to assign one or more IPv6 addresses to a network interface
- **Resource types (\*required):** [network-interface\*](#list_ec2-resource-network-interface)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [AssignPrivateIpAddresses](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AssignPrivateIpAddresses.html) **
- **Description:** Grants permission to assign one or more secondary private IP addresses to a network interface
- **Resource types (\*required):** [network-interface\*](#list_ec2-resource-network-interface)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [AssignPrivateNatGatewayAddress](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AssignPrivateNatGatewayAddress.html) **
- **Description:** Grants permission to assign one or more secondary private IP addresses to a private NAT gateway
- **Resource types (\*required):** [natgateway\*](#list_ec2-resource-natgateway)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [AssociateAddress](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AssociateAddress.html) **
- **Description:** Grants permission to associate an Elastic IP address (EIP) with an instance or a network interface
- **Resource types (\*required):** [elastic-ip](#list_ec2-resource-elastic-ip) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AllocationId](#list_ec2-ec2_AllocationId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Domain](#list_ec2-ec2_Domain)
[ec2:PublicIpAddress](#list_ec2-ec2_PublicIpAddress)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [instance](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [network-interface](#list_ec2-resource-network-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [AssociateCapacityReservationBillingOwner](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AssociateCapacityReservationBillingOwner.html) **
- **Description:** Grants permission to assign billing of the unused capacity of a shared Capacity Reservation to a consumer account
- **Resource types (\*required):** [capacity-reservation\*](#list_ec2-resource-capacity-reservation)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CapacityReservationFleet](#list_ec2-ec2_CapacityReservationFleet)
[ec2:CommitmentDuration](#list_ec2-ec2_CommitmentDuration)
[ec2:CreateDate](#list_ec2-ec2_CreateDate)
[ec2:DestinationCapacityReservationId](#list_ec2-ec2_DestinationCapacityReservationId)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:EndDate](#list_ec2-ec2_EndDate)
[ec2:EndDateType](#list_ec2-ec2_EndDateType)
[ec2:EphemeralStorage](#list_ec2-ec2_EphemeralStorage)
[ec2:InstanceCount](#list_ec2-ec2_InstanceCount)
[ec2:InstanceMatchCriteria](#list_ec2-ec2_InstanceMatchCriteria)
[ec2:InstancePlatform](#list_ec2-ec2_InstancePlatform)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:InterruptibleCapacityReservationId](#list_ec2-ec2_InterruptibleCapacityReservationId)
[ec2:InterruptionType](#list_ec2-ec2_InterruptionType)
[ec2:IsInterruptible](#list_ec2-ec2_IsInterruptible)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SourceCapacityReservationId](#list_ec2-ec2_SourceCapacityReservationId)
[ec2:TargetInstanceCount](#list_ec2-ec2_TargetInstanceCount)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [AssociateClientVpnTargetNetwork](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AssociateClientVpnTargetNetwork.html) **
- **Description:** Grants permission to associate a target network with a Client VPN endpoint
- **Resource types (\*required):** [client-vpn-endpoint\*](#list_ec2-resource-client-vpn-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ClientRootCertificateChainArn](#list_ec2-ec2_ClientRootCertificateChainArn)
[ec2:CloudwatchLogGroupArn](#list_ec2-ec2_CloudwatchLogGroupArn)
[ec2:CloudwatchLogStreamArn](#list_ec2-ec2_CloudwatchLogStreamArn)
[ec2:DirectoryArn](#list_ec2-ec2_DirectoryArn)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SamlProviderArn](#list_ec2-ec2_SamlProviderArn)
[ec2:ServerCertificateArn](#list_ec2-ec2_ServerCertificateArn)
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [AssociateDhcpOptions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AssociateDhcpOptions.html) **
- **Description:** Grants permission to associate or disassociate a set of DHCP options with a VPC
- **Resource types (\*required):** [dhcp-options\*](#list_ec2-resource-dhcp-options) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:DhcpOptionsID](#list_ec2-ec2_DhcpOptionsID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [AssociateEnclaveCertificateIamRole](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AssociateEnclaveCertificateIamRole.html) **
- **Description:** Grants permission to associate an ACM certificate with an IAM role to be used in an EC2 Enclave
- **Resource types (\*required):** [certificate\*](#list_ec2-resource-certificate) / **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Resource types (\*required):** [role\*](#list_ec2-resource-role) / **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [AssociateIamInstanceProfile](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AssociateIamInstanceProfile.html) **
- **Description:** Grants permission to associate an IAM instance profile with a running or stopped instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [AssociateInstanceEventWindow](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AssociateInstanceEventWindow.html) **
- **Description:** Grants permission to associate one or more targets with an event window
- **Resource types (\*required):** [instance-event-window\*](#list_ec2-resource-instance-event-window)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [AssociateIpamByoasn](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AssociateIpamByoasn.html) **
- **Description:** Grants permission to associate an Autonomous System Number (ASN) with a BYOIP CIDR
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [AssociateIpamResourceDiscovery](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AssociateIpamResourceDiscovery.html) **
- **Description:** Grants permission to associate an IPAM resource discovery with an Amazon VPC IPAM
- **Resource types (\*required):** [ipam\*](#list_ec2-resource-ipam) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-resource-discovery\*](#list_ec2-resource-ipam-resource-discovery) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-resource-discovery-association\*](#list_ec2-resource-ipam-resource-discovery-association) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [AssociateNatGatewayAddress](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AssociateNatGatewayAddress.html) **
- **Description:** Grants permission to associate an Elastic IP address and private IP address with a public Nat gateway
- **Resource types (\*required):** [elastic-ip\*](#list_ec2-resource-elastic-ip) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AllocationId](#list_ec2-ec2_AllocationId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Domain](#list_ec2-ec2_Domain)
[ec2:PublicIpAddress](#list_ec2-ec2_PublicIpAddress)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [natgateway\*](#list_ec2-resource-natgateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [AssociateRouteServer](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AssociateRouteServer.html) **
- **Description:** Grants permission to associate a route server with a VPC
- **Resource types (\*required):** [route-server\*](#list_ec2-resource-route-server) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [AssociateRouteTable](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AssociateRouteTable.html) **
- **Description:** Grants permission to associate a subnet or gateway with a route table
- **Resource types (\*required):** [internet-gateway](#list_ec2-resource-internet-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:InternetGatewayID](#list_ec2-ec2_InternetGatewayID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipv4pool-ec2](#list_ec2-resource-ipv4pool-ec2) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [route-table\*](#list_ec2-resource-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RouteTableID](#list_ec2-ec2_RouteTableID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [vpn-gateway](#list_ec2-resource-vpn-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [AssociateSecurityGroupVpc](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AssociateSecurityGroupVpc.html) **
- **Description:** Grants permission to associate a security group with another VPC in the same Region
- **Resource types (\*required):** [security-group\*](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [AssociateSubnetCidrBlock](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AssociateSubnetCidrBlock.html) **
- **Description:** Grants permission to associate a CIDR block with a subnet
- **Resource types (\*required):** [ipam-pool](#list_ec2-resource-ipam-pool) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [subnet\*](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [AssociateTransitGatewayMulticastDomain](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AssociateTransitGatewayMulticastDomain.html) **
- **Description:** Grants permission to associate an attachment and list of subnets with a transit gateway multicast domain
- **Resource types (\*required):** [subnet\*](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [transit-gateway-attachment\*](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [transit-gateway-multicast-domain\*](#list_ec2-resource-transit-gateway-multicast-domain) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMulticastDomainId](#list_ec2-ec2_transitGatewayMulticastDomainId)
- **Access level:** Write
- ** [AssociateTransitGatewayPolicyTable](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AssociateTransitGatewayPolicyTable.html) **
- **Description:** Grants permission to associate a policy table with a transit gateway attachment
- **Resource types (\*required):** [transit-gateway-attachment\*](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [transit-gateway-policy-table\*](#list_ec2-resource-transit-gateway-policy-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayPolicyTableId](#list_ec2-ec2_transitGatewayPolicyTableId)
- **Access level:** Write
- ** [AssociateTransitGatewayRouteTable](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AssociateTransitGatewayRouteTable.html) **
- **Description:** Grants permission to associate an attachment with a transit gateway route table
- **Resource types (\*required):** [transit-gateway-attachment\*](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [transit-gateway-route-table\*](#list_ec2-resource-transit-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableId](#list_ec2-ec2_transitGatewayRouteTableId)
- **Access level:** Write
- ** [AssociateTrunkInterface](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AssociateTrunkInterface.html) **
- **Description:** Grants permission to associate a branch network interface with a trunk network interface
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [AssociateVpcCidrBlock](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AssociateVpcCidrBlock.html) **
- **Description:** Grants permission to associate a CIDR block with a VPC
- **Resource types (\*required):** [ipam-pool](#list_ec2-resource-ipam-pool) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipv6pool-ec2](#list_ec2-resource-ipv6pool-ec2) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [AttachClassicLinkVpc](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AttachClassicLinkVpc.html) **
- **Description:** Grants permission to link an EC2-Classic instance to a ClassicLink-enabled VPC through one or more of the VPC's security groups
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [security-group\*](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [AttachImageWatermark](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AttachImageWatermark.html) **
- **Description:** Grants permission to attach a watermark to an Amazon Machine Image (AMI)
- **Resource types (\*required):** [image\*](#list_ec2-resource-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Access level:** Write
- ** [AttachInternetGateway](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AttachInternetGateway.html) **
- **Description:** Grants permission to attach an internet gateway to a VPC
- **Resource types (\*required):** [internet-gateway\*](#list_ec2-resource-internet-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:InternetGatewayID](#list_ec2-ec2_InternetGatewayID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [AttachNetworkInterface](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AttachNetworkInterface.html) **
- **Description:** Grants permission to attach a network interface to an instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [network-interface\*](#list_ec2-resource-network-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [AttachVerifiedAccessTrustProvider](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AttachVerifiedAccessTrustProvider.html) **
- **Description:** Grants permission to attach a trust provider to a Verified Access instance
- **Resource types (\*required):** [verified-access-instance\*](#list_ec2-resource-verified-access-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [verified-access-trust-provider\*](#list_ec2-resource-verified-access-trust-provider) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [AttachVolume](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AttachVolume.html) **
- **Description:** Grants permission to attach an EBS volume to a running or stopped instance and expose it to the instance with the specified device name
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [volume\*](#list_ec2-resource-volume) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType)
- **Access level:** Write
- ** [AttachVpnGateway](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AttachVpnGateway.html) **
- **Description:** Grants permission to attach a virtual private gateway to a VPC
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Resource types (\*required):** [vpn-gateway\*](#list_ec2-resource-vpn-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [AuthorizeClientVpnIngress](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AuthorizeClientVpnIngress.html) **
- **Description:** Grants permission to add an inbound authorization rule to a Client VPN endpoint
- **Resource types (\*required):** [client-vpn-endpoint\*](#list_ec2-resource-client-vpn-endpoint)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ClientRootCertificateChainArn](#list_ec2-ec2_ClientRootCertificateChainArn)
[ec2:CloudwatchLogGroupArn](#list_ec2-ec2_CloudwatchLogGroupArn)
[ec2:CloudwatchLogStreamArn](#list_ec2-ec2_CloudwatchLogStreamArn)
[ec2:DirectoryArn](#list_ec2-ec2_DirectoryArn)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SamlProviderArn](#list_ec2-ec2_SamlProviderArn)
[ec2:ServerCertificateArn](#list_ec2-ec2_ServerCertificateArn)
- **Access level:** Write
- ** [AuthorizeSecurityGroupEgress](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AuthorizeSecurityGroupEgress.html) **
- **Description:** Grants permission to add one or more outbound rules to a VPC security group. Policies using the security-group-rule resource-level permission are only enforced when the API request includes TagSpecifications
- **Resource types (\*required):** [security-group\*](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [security-group-rule](#list_ec2-resource-security-group-rule) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [AuthorizeSecurityGroupIngress](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AuthorizeSecurityGroupIngress.html) **
- **Description:** Grants permission to add one or more inbound rules to a VPC security group. Policies using the security-group-rule resource-level permission are only enforced when the API request includes TagSpecifications
- **Resource types (\*required):** [security-group\*](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [security-group-rule](#list_ec2-resource-security-group-rule) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [BundleInstance](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_BundleInstance.html) **
- **Description:** Grants permission to bundle an instance store-backed Windows instance
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [CancelBundleTask](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CancelBundleTask.html) **
- **Description:** Grants permission to cancel a bundling operation
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [CancelCapacityReservation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CancelCapacityReservation.html) **
- **Description:** Grants permission to cancel a Capacity Reservation and release the reserved capacity
- **Resource types (\*required):** [capacity-reservation\*](#list_ec2-resource-capacity-reservation) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CapacityReservationFleet](#list_ec2-ec2_CapacityReservationFleet)
[ec2:CommitmentDuration](#list_ec2-ec2_CommitmentDuration)
[ec2:CreateDate](#list_ec2-ec2_CreateDate)
[ec2:DestinationCapacityReservationId](#list_ec2-ec2_DestinationCapacityReservationId)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:EndDate](#list_ec2-ec2_EndDate)
[ec2:EndDateType](#list_ec2-ec2_EndDateType)
[ec2:EphemeralStorage](#list_ec2-ec2_EphemeralStorage)
[ec2:InstanceCount](#list_ec2-ec2_InstanceCount)
[ec2:InstanceMatchCriteria](#list_ec2-ec2_InstanceMatchCriteria)
[ec2:InstancePlatform](#list_ec2-ec2_InstancePlatform)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:InterruptibleCapacityReservationId](#list_ec2-ec2_InterruptibleCapacityReservationId)
[ec2:InterruptionType](#list_ec2-ec2_InterruptionType)
[ec2:IsInterruptible](#list_ec2-ec2_IsInterruptible)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SourceCapacityReservationId](#list_ec2-ec2_SourceCapacityReservationId)
[ec2:TargetInstanceCount](#list_ec2-ec2_TargetInstanceCount)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [capacity-reservation-cancellation-quote](#list_ec2-resource-capacity-reservation-cancellation-quote) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CancelCapacityReservationFleets](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CancelCapacityReservationFleets.html) **
- **Description:** Grants permission to cancel one or more Capacity Reservation Fleets
- **Resource types (\*required):** [capacity-reservation-fleet\*](#list_ec2-resource-capacity-reservation-fleet)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CancelConversionTask](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CancelConversionTask.html) **
- **Description:** Grants permission to cancel an active conversion task
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [CancelDeclarativePoliciesReport](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CancelDeclarativePoliciesReport.html) **
- **Description:** Grants permission to cancel a declarative policies report
- **Resource types (\*required):** [declarative-policies-report\*](#list_ec2-resource-declarative-policies-report)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CancelExportTask](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CancelExportTask.html) **
- **Description:** Grants permission to cancel an active export task
- **Resource types (\*required):** [export-image-task](#list_ec2-resource-export-image-task) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [export-instance-task](#list_ec2-resource-export-instance-task) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CancelImageLaunchPermission](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CancelImageLaunchPermission.html) **
- **Description:** Grants permission to remove your Amazon Web Services account from the launch permissions for the specified AMI
- **Resource types (\*required):** [image\*](#list_ec2-resource-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Access level:** Permissions management, Write
- ** [CancelImportTask](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CancelImportTask.html) **
- **Description:** Grants permission to cancel an in-process import virtual machine or import snapshot task
- **Resource types (\*required):** [import-image-task](#list_ec2-resource-import-image-task) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [import-snapshot-task](#list_ec2-resource-import-snapshot-task) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CancelReservedInstancesListing](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CancelReservedInstancesListing.html) **
- **Description:** Grants permission to cancel a Reserved Instance listing on the Reserved Instance Marketplace
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [CancelSpotFleetRequests](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CancelSpotFleetRequests.html) **
- **Description:** Grants permission to cancel one or more Spot Fleet requests
- **Resource types (\*required):** [spot-fleet-request\*](#list_ec2-resource-spot-fleet-request)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CancelSpotInstanceRequests](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CancelSpotInstanceRequests.html) **
- **Description:** Grants permission to cancel one or more Spot Instance requests
- **Resource types (\*required):** [spot-instances-request\*](#list_ec2-resource-spot-instances-request)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ConfirmProductInstance](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ConfirmProductInstance.html) **
- **Description:** Grants permission to determine whether an owned product code is associated with an instance
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [CopyFpgaImage](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CopyFpgaImage.html) **
- **Description:** Grants permission to copy a source Amazon FPGA image (AFI) to the current Region. Resource-level permissions specified for this action apply to the new AFI only. They do not apply to the source AFI
- **Resource types (\*required):** [fpga-image\*](#list_ec2-resource-fpga-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CopyImage](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CopyImage.html) **
- **Description:** Grants permission to copy an Amazon Machine Image (AMI) from a source Region to the current Region
- **Resource types (\*required):** [image\*](#list_ec2-resource-image) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Resource types (\*required):** [snapshot\*](#list_ec2-resource-snapshot) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Access level:** Write
- ** [CopySnapshot](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CopySnapshot.html) **
- **Description:** Grants permission to copy a point-in-time snapshot of an EBS volume and store it in Amazon S3. Resource-level permissions specified for this action apply to both the snapshot copy and the source snapshot
- **Resource types (\*required):** [snapshot\*](#list_ec2-resource-snapshot)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Access level:** Write
- ** [CopyVolumes](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CopyVolumes.html) **
- **Description:** Grants permission to create a copy of an EBS volume. Resource-level permissions specified for this action apply to the source and copied volume. Condition keys for the copied volume correspond to parameters specified in the CopyVolumes API request
- **Resource types (\*required):** [volume\*](#list_ec2-resource-volume)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType)
- **Access level:** Write
- ** [CreateCapacityManagerDataExport](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateCapacityManagerDataExport.html) **
- **Description:** Grants permission to create a new S3 Data Export for Capacity Manager
- **Resource types (\*required):** [capacity-manager-data-export\*](#list_ec2-resource-capacity-manager-data-export)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateCapacityReservation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateCapacityReservation.html) **
- **Description:** Grants permission to create a Capacity Reservation
- **Resource types (\*required):** [capacity-reservation\*](#list_ec2-resource-capacity-reservation)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CapacityReservationFleet](#list_ec2-ec2_CapacityReservationFleet)
[ec2:CommitmentDuration](#list_ec2-ec2_CommitmentDuration)
[ec2:CreateDate](#list_ec2-ec2_CreateDate)
[ec2:DestinationCapacityReservationId](#list_ec2-ec2_DestinationCapacityReservationId)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:EndDate](#list_ec2-ec2_EndDate)
[ec2:EndDateType](#list_ec2-ec2_EndDateType)
[ec2:EphemeralStorage](#list_ec2-ec2_EphemeralStorage)
[ec2:InstanceCount](#list_ec2-ec2_InstanceCount)
[ec2:InstanceMatchCriteria](#list_ec2-ec2_InstanceMatchCriteria)
[ec2:InstancePlatform](#list_ec2-ec2_InstancePlatform)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:InterruptibleCapacityReservationId](#list_ec2-ec2_InterruptibleCapacityReservationId)
[ec2:InterruptionType](#list_ec2-ec2_InterruptionType)
[ec2:IsInterruptible](#list_ec2-ec2_IsInterruptible)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SourceCapacityReservationId](#list_ec2-ec2_SourceCapacityReservationId)
[ec2:TargetInstanceCount](#list_ec2-ec2_TargetInstanceCount)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [CreateCapacityReservationBySplitting](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateCapacityReservationBySplitting.html) **
- **Description:** Grants permission to create a new Capacity Reservation by splitting the available capacity of the source Capacity Reservation
- **Resource types (\*required):** [capacity-reservation\*](#list_ec2-resource-capacity-reservation)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CapacityReservationFleet](#list_ec2-ec2_CapacityReservationFleet)
[ec2:CommitmentDuration](#list_ec2-ec2_CommitmentDuration)
[ec2:CreateDate](#list_ec2-ec2_CreateDate)
[ec2:DestinationCapacityReservationId](#list_ec2-ec2_DestinationCapacityReservationId)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:EndDate](#list_ec2-ec2_EndDate)
[ec2:EndDateType](#list_ec2-ec2_EndDateType)
[ec2:EphemeralStorage](#list_ec2-ec2_EphemeralStorage)
[ec2:InstanceCount](#list_ec2-ec2_InstanceCount)
[ec2:InstanceMatchCriteria](#list_ec2-ec2_InstanceMatchCriteria)
[ec2:InstancePlatform](#list_ec2-ec2_InstancePlatform)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:InterruptibleCapacityReservationId](#list_ec2-ec2_InterruptibleCapacityReservationId)
[ec2:InterruptionType](#list_ec2-ec2_InterruptionType)
[ec2:IsInterruptible](#list_ec2-ec2_IsInterruptible)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SourceCapacityReservationId](#list_ec2-ec2_SourceCapacityReservationId)
[ec2:TargetInstanceCount](#list_ec2-ec2_TargetInstanceCount)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [CreateCapacityReservationCancellationQuote](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateCapacityReservationCancellationQuote.html) **
- **Description:** Grants permission to generate a cancellation quote for a future-dated Capacity Reservation
- **Resource types (\*required):** [capacity-reservation\*](#list_ec2-resource-capacity-reservation) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CapacityReservationFleet](#list_ec2-ec2_CapacityReservationFleet)
[ec2:CommitmentDuration](#list_ec2-ec2_CommitmentDuration)
[ec2:CreateDate](#list_ec2-ec2_CreateDate)
[ec2:DestinationCapacityReservationId](#list_ec2-ec2_DestinationCapacityReservationId)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:EndDate](#list_ec2-ec2_EndDate)
[ec2:EndDateType](#list_ec2-ec2_EndDateType)
[ec2:EphemeralStorage](#list_ec2-ec2_EphemeralStorage)
[ec2:InstanceCount](#list_ec2-ec2_InstanceCount)
[ec2:InstanceMatchCriteria](#list_ec2-ec2_InstanceMatchCriteria)
[ec2:InstancePlatform](#list_ec2-ec2_InstancePlatform)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:InterruptibleCapacityReservationId](#list_ec2-ec2_InterruptibleCapacityReservationId)
[ec2:InterruptionType](#list_ec2-ec2_InterruptionType)
[ec2:IsInterruptible](#list_ec2-ec2_IsInterruptible)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SourceCapacityReservationId](#list_ec2-ec2_SourceCapacityReservationId)
[ec2:TargetInstanceCount](#list_ec2-ec2_TargetInstanceCount)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [capacity-reservation-cancellation-quote\*](#list_ec2-resource-capacity-reservation-cancellation-quote) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateCapacityReservationFleet](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateCapacityReservationFleet.html) **
- **Description:** Grants permission to create a Capacity Reservation Fleet
- **Resource types (\*required):** [capacity-reservation-fleet\*](#list_ec2-resource-capacity-reservation-fleet)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateCarrierGateway](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateCarrierGateway.html) **
- **Description:** Grants permission to create a carrier gateway and provides CSP connectivity to VPC customers
- **Resource types (\*required):** [carrier-gateway\*](#list_ec2-resource-carrier-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [CreateClientVpnEndpoint](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateClientVpnEndpoint.html) **
- **Description:** Grants permission to create a Client VPN endpoint
- **Resource types (\*required):** [client-vpn-endpoint\*](#list_ec2-resource-client-vpn-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ClientRootCertificateChainArn](#list_ec2-ec2_ClientRootCertificateChainArn)
[ec2:CloudwatchLogGroupArn](#list_ec2-ec2_CloudwatchLogGroupArn)
[ec2:CloudwatchLogStreamArn](#list_ec2-ec2_CloudwatchLogStreamArn)
[ec2:DirectoryArn](#list_ec2-ec2_DirectoryArn)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SamlProviderArn](#list_ec2-ec2_SamlProviderArn)
[ec2:ServerCertificateArn](#list_ec2-ec2_ServerCertificateArn)
- **Resource types (\*required):** [security-group](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [transit-gateway](#list_ec2-resource-transit-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayId](#list_ec2-ec2_transitGatewayId)
- **Resource types (\*required):** [vpc](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [CreateClientVpnRoute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateClientVpnRoute.html) **
- **Description:** Grants permission to add a network route to a Client VPN endpoint's route table
- **Resource types (\*required):** [client-vpn-endpoint\*](#list_ec2-resource-client-vpn-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ClientRootCertificateChainArn](#list_ec2-ec2_ClientRootCertificateChainArn)
[ec2:CloudwatchLogGroupArn](#list_ec2-ec2_CloudwatchLogGroupArn)
[ec2:CloudwatchLogStreamArn](#list_ec2-ec2_CloudwatchLogStreamArn)
[ec2:DirectoryArn](#list_ec2-ec2_DirectoryArn)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SamlProviderArn](#list_ec2-ec2_SamlProviderArn)
[ec2:ServerCertificateArn](#list_ec2-ec2_ServerCertificateArn)
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [CreateCoipCidr](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateCoipCidr.html) **
- **Description:** Grants permission to create a range of customer-owned IP (CoIP) addresses
- **Resource types (\*required):** [coip-pool\*](#list_ec2-resource-coip-pool)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateCoipPool](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateCoipPool.html) **
- **Description:** Grants permission to create a pool of customer-owned IP (CoIP) addresses
- **Resource types (\*required):** [coip-pool\*](#list_ec2-resource-coip-pool) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [local-gateway-route-table\*](#list_ec2-resource-local-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateCustomerGateway](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateCustomerGateway.html) **
- **Description:** Grants permission to create a customer gateway, which provides information to Amazon about your customer gateway device
- **Resource types (\*required):** [customer-gateway\*](#list_ec2-resource-customer-gateway)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateDefaultSubnet](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateDefaultSubnet.html) **
- **Description:** Grants permission to create a default subnet in a specified Availability Zone in a default VPC
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [CreateDefaultVpc](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateDefaultVpc.html) **
- **Description:** Grants permission to create a default VPC with a default subnet in each Availability Zone
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [CreateDelegateMacVolumeOwnershipTask](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateDelegateMacVolumeOwnershipTask.html) **
- **Description:** Grants permission to create a volume ownership delegation task for an Apple silicon Mac instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [mac-modification-task\*](#list_ec2-resource-mac-modification-task) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateDhcpOptions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateDhcpOptions.html) **
- **Description:** Grants permission to create a set of DHCP options for a VPC
- **Resource types (\*required):** [dhcp-options\*](#list_ec2-resource-dhcp-options)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:DhcpOptionsID](#list_ec2-ec2_DhcpOptionsID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateEgressOnlyInternetGateway](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateEgressOnlyInternetGateway.html) **
- **Description:** Grants permission to create an egress-only internet gateway for a VPC
- **Resource types (\*required):** [egress-only-internet-gateway\*](#list_ec2-resource-egress-only-internet-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [CreateFleet](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateFleet.html) **
- **Description:** Grants permission to launch an EC2 Fleet. Resource-level permissions for this action do not include the resources specified in a launch template. To specify resource-level permissions for resources specified in a launch template, you must include the resources in the RunInstances action statement
- **Resource types (\*required):** [fleet\*](#list_ec2-resource-fleet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [image](#list_ec2-resource-image) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [launch-template](#list_ec2-resource-launch-template) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [placement-group](#list_ec2-resource-placement-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:PlacementGroupName](#list_ec2-ec2_PlacementGroupName)
[ec2:PlacementGroupStrategy](#list_ec2-ec2_PlacementGroupStrategy)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [volume](#list_ec2-resource-volume) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType)
- **Access level:** Write
- ** [CreateFlowLogs](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateFlowLogs.html) **
- **Description:** Grants permission to create one or more flow logs to capture IP traffic for a network interface
- **Resource types (\*required):** [natgateway](#list_ec2-resource-natgateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [network-interface](#list_ec2-resource-network-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [transit-gateway](#list_ec2-resource-transit-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayId](#list_ec2-ec2_transitGatewayId)
- **Resource types (\*required):** [transit-gateway-attachment](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [vpc](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Resource types (\*required):** [vpc-flow-log\*](#list_ec2-resource-vpc-flow-log) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateFpgaImage](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateFpgaImage.html) **
- **Description:** Grants permission to create an Amazon FPGA Image (AFI) from a design checkpoint (DCP)
- **Resource types (\*required):** [fpga-image\*](#list_ec2-resource-fpga-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateImage](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateImage.html) **
- **Description:** Grants permission to create an Amazon EBS-backed AMI from a stopped or running Amazon EBS-backed instance. This action can reboot instances as part of the image creation process, even without RebootInstances permissions. To prevent instance reboots during image creation, use the NoReboot parameter
- **Resource types (\*required):** [image\*](#list_ec2-resource-image) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [snapshot\*](#list_ec2-resource-snapshot) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Access level:** Write
- ** [CreateImageUsageReport](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateImageUsageReport.html) **
- **Description:** Grants permission to create an AMI usage report
- **Resource types (\*required):** [image\*](#list_ec2-resource-image) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Resource types (\*required):** [image-usage-report\*](#list_ec2-resource-image-usage-report) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateInstanceConnectEndpoint](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateInstanceConnectEndpoint.html) **
- **Description:** Grants permission to create an EC2 Instance Connect Endpoint that allows you to connect to an instance without a public IPv4 address
- **Resource types (\*required):** [instance-connect-endpoint\*](#list_ec2-resource-instance-connect-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
- **Resource types (\*required):** [security-group](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [subnet\*](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [CreateInstanceEventWindow](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateInstanceEventWindow.html) **
- **Description:** Grants permission to create an event window in which scheduled events for the associated Amazon EC2 instances can run
- **Resource types (\*required):** [instance-event-window\*](#list_ec2-resource-instance-event-window)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateInstanceExportTask](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateInstanceExportTask.html) **
- **Description:** Grants permission to export a running or stopped instance to an Amazon S3 bucket
- **Resource types (\*required):** [export-instance-task\*](#list_ec2-resource-export-instance-task) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [CreateInternetGateway](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateInternetGateway.html) **
- **Description:** Grants permission to create an internet gateway for a VPC
- **Resource types (\*required):** [internet-gateway\*](#list_ec2-resource-internet-gateway)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:InternetGatewayID](#list_ec2-ec2_InternetGatewayID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateInterruptibleCapacityReservationAllocation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateInterruptibleCapacityReservationAllocation.html) **
- **Description:** Grants permission to create an interruptible Capacity Reservation by specifying the number of unused instances you want to allocate from your source reservation
- **Resource types (\*required):** [capacity-reservation\*](#list_ec2-resource-capacity-reservation)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CapacityReservationFleet](#list_ec2-ec2_CapacityReservationFleet)
[ec2:CommitmentDuration](#list_ec2-ec2_CommitmentDuration)
[ec2:CreateDate](#list_ec2-ec2_CreateDate)
[ec2:DestinationCapacityReservationId](#list_ec2-ec2_DestinationCapacityReservationId)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:EndDate](#list_ec2-ec2_EndDate)
[ec2:EndDateType](#list_ec2-ec2_EndDateType)
[ec2:EphemeralStorage](#list_ec2-ec2_EphemeralStorage)
[ec2:InstanceCount](#list_ec2-ec2_InstanceCount)
[ec2:InstanceMatchCriteria](#list_ec2-ec2_InstanceMatchCriteria)
[ec2:InstancePlatform](#list_ec2-ec2_InstancePlatform)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:InterruptibleCapacityReservationId](#list_ec2-ec2_InterruptibleCapacityReservationId)
[ec2:InterruptionType](#list_ec2-ec2_InterruptionType)
[ec2:IsInterruptible](#list_ec2-ec2_IsInterruptible)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SourceCapacityReservationId](#list_ec2-ec2_SourceCapacityReservationId)
[ec2:TargetInstanceCount](#list_ec2-ec2_TargetInstanceCount)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [CreateIpam](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateIpam.html) **
- **Description:** Grants permission to create an Amazon VPC IP Address Manager (IPAM)
- **Resource types (\*required):** [ipam\*](#list_ec2-resource-ipam)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateIpamExternalResourceVerificationToken](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateIpamExternalResourceVerificationToken.html) **
- **Description:** Grants permission to create a verification token, which proves ownership of an external resource
- **Resource types (\*required):** [ipam\*](#list_ec2-resource-ipam) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-external-resource-verification-token\*](#list_ec2-resource-ipam-external-resource-verification-token) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateIpamPolicy](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateIpamPolicy.html) **
- **Description:** Grants permission to create a policy in Amazon VPC IP Address Manager (IPAM) that defines rules for allocating public IPv4 addresses from IPAM pools to Amazon resources
- **Resource types (\*required):** [ipam\*](#list_ec2-resource-ipam) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-policy\*](#list_ec2-resource-ipam-policy) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateIpamPool](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateIpamPool.html) **
- **Description:** Grants permission to create an IP address pool for Amazon VPC IP Address Manager (IPAM), which is a collection of contiguous IP address CIDRs
- **Resource types (\*required):** [ipam-pool\*](#list_ec2-resource-ipam-pool) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-scope\*](#list_ec2-resource-ipam-scope) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateIpamPrefixListResolver](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateIpamPrefixListResolver.html) **
- **Description:** Grants permission to create an IPAM prefix list resolver that defines rules for selecting CIDRs to include in prefix lists
- **Resource types (\*required):** [ipam\*](#list_ec2-resource-ipam) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-prefix-list-resolver\*](#list_ec2-resource-ipam-prefix-list-resolver) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-scope](#list_ec2-resource-ipam-scope) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateIpamPrefixListResolverTarget](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateIpamPrefixListResolverTarget.html) **
- **Description:** Grants permission to create an IPAM prefix list resolver target that links a resolver to a managed prefix list
- **Resource types (\*required):** [ipam-prefix-list-resolver\*](#list_ec2-resource-ipam-prefix-list-resolver) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-prefix-list-resolver-target\*](#list_ec2-resource-ipam-prefix-list-resolver-target) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateIpamResourceDiscovery](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateIpamResourceDiscovery.html) **
- **Description:** Grants permission to create an IPAM resource discovery
- **Resource types (\*required):** [ipam-resource-discovery\*](#list_ec2-resource-ipam-resource-discovery)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateIpamScope](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateIpamScope.html) **
- **Description:** Grants permission to create an Amazon VPC IP Address Manager (IPAM) scope, which is the highest-level container within IPAM
- **Resource types (\*required):** [ipam\*](#list_ec2-resource-ipam) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-scope\*](#list_ec2-resource-ipam-scope) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateKeyPair](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateKeyPair.html) **
- **Description:** Grants permission to create a 2048-bit RSA key pair
- **Resource types (\*required):** [key-pair\*](#list_ec2-resource-key-pair)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KeyPairName](#list_ec2-ec2_KeyPairName)
[ec2:KeyPairType](#list_ec2-ec2_KeyPairType)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateLaunchTemplate](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateLaunchTemplate.html) **
- **Description:** Grants permission to create a launch template
- **Resource types (\*required):** [launch-template\*](#list_ec2-resource-launch-template)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateLaunchTemplateVersion](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateLaunchTemplateVersion.html) **
- **Description:** Grants permission to create a new version of a launch template
- **Resource types (\*required):** [launch-template\*](#list_ec2-resource-launch-template)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateLocalGatewayRoute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateLocalGatewayRoute.html) **
- **Description:** Grants permission to create a static route for a local gateway route table
- **Resource types (\*required):** [local-gateway-route-table\*](#list_ec2-resource-local-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [local-gateway-virtual-interface-group](#list_ec2-resource-local-gateway-virtual-interface-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [network-interface](#list_ec2-resource-network-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [prefix-list](#list_ec2-resource-prefix-list) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IpamPrefixListResolverTargetId](#list_ec2-ec2_IpamPrefixListResolverTargetId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateLocalGatewayRouteTable](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateLocalGatewayRouteTable.html) **
- **Description:** Grants permission to create a local gateway route table
- **Resource types (\*required):** [local-gateway\*](#list_ec2-resource-local-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [local-gateway-route-table\*](#list_ec2-resource-local-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateLocalGatewayRouteTableVirtualInterfaceGroupAssociation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateLocalGatewayRouteTableVirtualInterfaceGroupAssociation.html) **
- **Description:** Grants permission to create a local gateway route table virtual interface group association
- **Resource types (\*required):** [local-gateway-route-table\*](#list_ec2-resource-local-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [local-gateway-route-table-virtual-interface-group-association\*](#list_ec2-resource-local-gateway-route-table-virtual-interface-group-association) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [local-gateway-virtual-interface-group\*](#list_ec2-resource-local-gateway-virtual-interface-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateLocalGatewayRouteTableVpcAssociation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateLocalGatewayRouteTableVpcAssociation.html) **
- **Description:** Grants permission to associate a VPC with a local gateway route table
- **Resource types (\*required):** [local-gateway-route-table\*](#list_ec2-resource-local-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [local-gateway-route-table-vpc-association\*](#list_ec2-resource-local-gateway-route-table-vpc-association) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [CreateLocalGatewayVirtualInterface](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateLocalGatewayVirtualInterface.html) **
- **Description:** Grants permission to create a local gateway virtual interface
- **Resource types (\*required):** [local-gateway-virtual-interface\*](#list_ec2-resource-local-gateway-virtual-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [local-gateway-virtual-interface-group\*](#list_ec2-resource-local-gateway-virtual-interface-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [outpost-lag\*](#list_ec2-resource-outpost-lag) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateLocalGatewayVirtualInterfaceGroup](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateLocalGatewayVirtualInterfaceGroup.html) **
- **Description:** Grants permission to create a local gateway virtual interface group
- **Resource types (\*required):** [local-gateway\*](#list_ec2-resource-local-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [local-gateway-virtual-interface-group\*](#list_ec2-resource-local-gateway-virtual-interface-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateMacSystemIntegrityProtectionModificationTask](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateMacSystemIntegrityProtectionModificationTask.html) **
- **Description:** Grants permission to create a System Integrity Protection (SIP) modification task for an Amazon EC2 Mac instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [mac-modification-task\*](#list_ec2-resource-mac-modification-task) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateManagedPrefixList](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateManagedPrefixList.html) **
- **Description:** Grants permission to create a managed prefix list
- **Resource types (\*required):** [prefix-list\*](#list_ec2-resource-prefix-list)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IpamPrefixListResolverTargetId](#list_ec2-ec2_IpamPrefixListResolverTargetId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateNatGateway](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateNatGateway.html) **
- **Description:** Grants permission to create a NAT gateway in a subnet
- **Resource types (\*required):** [elastic-ip](#list_ec2-resource-elastic-ip) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AllocationId](#list_ec2-ec2_AllocationId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Domain](#list_ec2-ec2_Domain)
[ec2:PublicIpAddress](#list_ec2-ec2_PublicIpAddress)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [natgateway\*](#list_ec2-resource-natgateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [vpc](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [CreateNetworkAcl](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateNetworkAcl.html) **
- **Description:** Grants permission to create a network ACL in a VPC
- **Resource types (\*required):** [network-acl\*](#list_ec2-resource-network-acl) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:NetworkAclID](#list_ec2-ec2_NetworkAclID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [CreateNetworkAclEntry](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateNetworkAclEntry.html) **
- **Description:** Grants permission to create a numbered entry (a rule) in a network ACL
- **Resource types (\*required):** [network-acl\*](#list_ec2-resource-network-acl)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:NetworkAclID](#list_ec2-ec2_NetworkAclID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [CreateNetworkInsightsAccessScope](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateNetworkInsightsAccessScope.html) **
- **Description:** Grants permission to create a Network Access Scope
- **Resource types (\*required):** [network-insights-access-scope\*](#list_ec2-resource-network-insights-access-scope)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateNetworkInsightsPath](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateNetworkInsightsPath.html) **
- **Description:** Grants permission to create a path to analyze for reachability
- **Resource types (\*required):** [instance](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [internet-gateway](#list_ec2-resource-internet-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:InternetGatewayID](#list_ec2-ec2_InternetGatewayID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [network-insights-path\*](#list_ec2-resource-network-insights-path) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [network-interface](#list_ec2-resource-network-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [transit-gateway](#list_ec2-resource-transit-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayId](#list_ec2-ec2_transitGatewayId)
- **Resource types (\*required):** [vpc-endpoint](#list_ec2-resource-vpc-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpcePrivateDnsPreference](#list_ec2-ec2_VpcePrivateDnsPreference)
[ec2:VpcePrivateDnsSpecifiedDomains](#list_ec2-ec2_VpcePrivateDnsSpecifiedDomains)
[ec2:VpceServiceName](#list_ec2-ec2_VpceServiceName)
[ec2:VpceServiceOwner](#list_ec2-ec2_VpceServiceOwner)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
- **Resource types (\*required):** [vpc-endpoint-service](#list_ec2-resource-vpc-endpoint-service) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpceServicePrivateDnsName](#list_ec2-ec2_VpceServicePrivateDnsName)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
[ec2:VpceSupportedRegion](#list_ec2-ec2_VpceSupportedRegion)
- **Resource types (\*required):** [vpc-peering-connection](#list_ec2-resource-vpc-peering-connection) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AccepterVpc](#list_ec2-ec2_AccepterVpc)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RequesterVpc](#list_ec2-ec2_RequesterVpc)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpcPeeringConnectionID](#list_ec2-ec2_VpcPeeringConnectionID)
- **Resource types (\*required):** [vpn-gateway](#list_ec2-resource-vpn-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateNetworkInterface](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateNetworkInterface.html) **
- **Description:** Grants permission to create a network interface in a subnet
- **Resource types (\*required):** [network-interface\*](#list_ec2-resource-network-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [security-group](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [subnet\*](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [CreateNetworkInterfacePermission](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateNetworkInterfacePermission.html) **
- **Description:** Grants permission to create a permission for an Amazon-authorized user to perform certain operations on a network interface
- **Resource types (\*required):** [network-interface\*](#list_ec2-resource-network-interface)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Permissions management, Write
- ** [CreatePlacementGroup](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreatePlacementGroup.html) **
- **Description:** Grants permission to create a placement group
- **Resource types (\*required):** [placement-group\*](#list_ec2-resource-placement-group)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:PlacementGroupName](#list_ec2-ec2_PlacementGroupName)
[ec2:PlacementGroupStrategy](#list_ec2-ec2_PlacementGroupStrategy)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreatePublicIpv4Pool](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreatePublicIpv4Pool.html) **
- **Description:** Grants permission to create a public IPv4 address pool for public IPv4 CIDRs that you own and bring to Amazon to manage with Amazon VPC IP Address Manager (IPAM)
- **Resource types (\*required):** [ipv4pool-ec2\*](#list_ec2-resource-ipv4pool-ec2)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateReplaceRootVolumeTask](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateReplaceRootVolumeTask.html) **
- **Description:** Grants permission to create a root volume replacement task
- **Resource types (\*required):** [image](#list_ec2-resource-image) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [replace-root-volume-task\*](#list_ec2-resource-replace-root-volume-task) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [snapshot](#list_ec2-resource-snapshot) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Resource types (\*required):** [volume\*](#list_ec2-resource-volume) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType)
- **Access level:** Write
- ** [CreateReservedInstancesListing](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateReservedInstancesListing.html) **
- **Description:** Grants permission to create a listing for Standard Reserved Instances to be sold in the Reserved Instance Marketplace
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [CreateRestoreImageTask](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateRestoreImageTask.html) **
- **Description:** Grants permission to start a task that restores an AMI from an S3 object previously created by using CreateStoreImageTask
- **Resource types (\*required):** [image\*](#list_ec2-resource-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Access level:** Write
- ** [CreateRoute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateRoute.html) **
- **Description:** Grants permission to create a route in a VPC route table
- **Resource types (\*required):** [instance](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [route-table\*](#list_ec2-resource-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RouteTableID](#list_ec2-ec2_RouteTableID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [CreateRouteServer](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateRouteServer.html) **
- **Description:** Grants permission to create a route server
- **Resource types (\*required):** [route-server\*](#list_ec2-resource-route-server)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateRouteServerEndpoint](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateRouteServerEndpoint.html) **
- **Description:** Grants permission to create a route server endpoint
- **Resource types (\*required):** [route-server\*](#list_ec2-resource-route-server) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [route-server-endpoint\*](#list_ec2-resource-route-server-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [subnet\*](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [CreateRouteServerPeer](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateRouteServerPeer.html) **
- **Description:** Grants permission to create a route server peer
- **Resource types (\*required):** [route-server-endpoint\*](#list_ec2-resource-route-server-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [route-server-peer\*](#list_ec2-resource-route-server-peer) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateRouteTable](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateRouteTable.html) **
- **Description:** Grants permission to create a route table for a VPC
- **Resource types (\*required):** [route-table\*](#list_ec2-resource-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RouteTableID](#list_ec2-ec2_RouteTableID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [CreateSecondaryNetwork](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateSecondaryNetwork.html) **
- **Description:** Grants permission to create a secondary network
- **Resource types (\*required):** [secondary-network\*](#list_ec2-resource-secondary-network)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateSecondarySubnet](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateSecondarySubnet.html) **
- **Description:** Grants permission to create a secondary subnet
- **Resource types (\*required):** [secondary-network\*](#list_ec2-resource-secondary-network) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [secondary-subnet\*](#list_ec2-resource-secondary-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateSecurityGroup](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateSecurityGroup.html) **
- **Description:** Grants permission to create a security group
- **Resource types (\*required):** [security-group\*](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [vpc](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [CreateSnapshot](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateSnapshot.html) **
- **Description:** Grants permission to create a snapshot of an EBS volume and store it in Amazon S3
- **Resource types (\*required):** [snapshot\*](#list_ec2-resource-snapshot) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Resource types (\*required):** [volume\*](#list_ec2-resource-volume) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType)
- **Access level:** Write
- ** [CreateSnapshots](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateSnapshots.html) **
- **Description:** Grants permission to create crash-consistent snapshots of multiple EBS volumes and store them in Amazon S3
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [snapshot\*](#list_ec2-resource-snapshot) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Resource types (\*required):** [volume\*](#list_ec2-resource-volume) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType)
- **Access level:** Write
- ** [CreateSpotDatafeedSubscription](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateSpotDatafeedSubscription.html) **
- **Description:** Grants permission to create a data feed for Spot Instances to view Spot Instance usage logs
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [CreateStoreImageTask](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateStoreImageTask.html) **
- **Description:** Grants permission to store an AMI as a single object in an S3 bucket
- **Resource types (\*required):** [image\*](#list_ec2-resource-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Access level:** Write
- ** [CreateSubnet](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateSubnet.html) **
- **Description:** Grants permission to create a subnet in a VPC
- **Resource types (\*required):** [ipam-pool](#list_ec2-resource-ipam-pool) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [subnet\*](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [CreateSubnetCidrReservation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateSubnetCidrReservation.html) **
- **Description:** Grants permission to create a subnet CIDR reservation
- **Resource types (\*required):** [subnet\*](#list_ec2-resource-subnet)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [CreateTags](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateTags.html) **
- **Description:** Grants permission to add or overwrite one or more tags for Amazon EC2 resources
- **Resource types (\*required):** [capacity-block](#list_ec2-resource-capacity-block) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [capacity-manager-data-export](#list_ec2-resource-capacity-manager-data-export) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [capacity-reservation](#list_ec2-resource-capacity-reservation) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CapacityReservationFleet](#list_ec2-ec2_CapacityReservationFleet)
[ec2:CommitmentDuration](#list_ec2-ec2_CommitmentDuration)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:CreateDate](#list_ec2-ec2_CreateDate)
[ec2:DestinationCapacityReservationId](#list_ec2-ec2_DestinationCapacityReservationId)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:EndDate](#list_ec2-ec2_EndDate)
[ec2:EndDateType](#list_ec2-ec2_EndDateType)
[ec2:EphemeralStorage](#list_ec2-ec2_EphemeralStorage)
[ec2:InstanceCount](#list_ec2-ec2_InstanceCount)
[ec2:InstanceMatchCriteria](#list_ec2-ec2_InstanceMatchCriteria)
[ec2:InstancePlatform](#list_ec2-ec2_InstancePlatform)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:InterruptibleCapacityReservationId](#list_ec2-ec2_InterruptibleCapacityReservationId)
[ec2:InterruptionType](#list_ec2-ec2_InterruptionType)
[ec2:IsInterruptible](#list_ec2-ec2_IsInterruptible)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SourceCapacityReservationId](#list_ec2-ec2_SourceCapacityReservationId)
[ec2:TargetInstanceCount](#list_ec2-ec2_TargetInstanceCount)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [capacity-reservation-cancellation-quote](#list_ec2-resource-capacity-reservation-cancellation-quote) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [capacity-reservation-fleet](#list_ec2-resource-capacity-reservation-fleet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [carrier-gateway](#list_ec2-resource-carrier-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [client-vpn-endpoint](#list_ec2-resource-client-vpn-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ClientRootCertificateChainArn](#list_ec2-ec2_ClientRootCertificateChainArn)
[ec2:CloudwatchLogGroupArn](#list_ec2-ec2_CloudwatchLogGroupArn)
[ec2:CloudwatchLogStreamArn](#list_ec2-ec2_CloudwatchLogStreamArn)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:DirectoryArn](#list_ec2-ec2_DirectoryArn)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SamlProviderArn](#list_ec2-ec2_SamlProviderArn)
[ec2:ServerCertificateArn](#list_ec2-ec2_ServerCertificateArn)
- **Resource types (\*required):** [coip-pool](#list_ec2-resource-coip-pool) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [customer-gateway](#list_ec2-resource-customer-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [declarative-policies-report](#list_ec2-resource-declarative-policies-report) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [dedicated-host](#list_ec2-resource-dedicated-host) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AutoPlacement](#list_ec2-ec2_AutoPlacement)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:HostRecovery](#list_ec2-ec2_HostRecovery)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Quantity](#list_ec2-ec2_Quantity)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [dhcp-options](#list_ec2-resource-dhcp-options) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:DhcpOptionsID](#list_ec2-ec2_DhcpOptionsID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [egress-only-internet-gateway](#list_ec2-resource-egress-only-internet-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [elastic-gpu](#list_ec2-resource-elastic-gpu) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:ElasticGpuType](#list_ec2-ec2_ElasticGpuType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [elastic-ip](#list_ec2-resource-elastic-ip) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AllocationId](#list_ec2-ec2_AllocationId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Domain](#list_ec2-ec2_Domain)
[ec2:PublicIpAddress](#list_ec2-ec2_PublicIpAddress)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [export-image-task](#list_ec2-resource-export-image-task) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [export-instance-task](#list_ec2-resource-export-instance-task) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [fleet](#list_ec2-resource-fleet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [fpga-image](#list_ec2-resource-fpga-image) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [host-reservation](#list_ec2-resource-host-reservation) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [image](#list_ec2-resource-image) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Resource types (\*required):** [image-usage-report](#list_ec2-resource-image-usage-report) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [import-image-task](#list_ec2-resource-import-image-task) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [import-snapshot-task](#list_ec2-resource-import-snapshot-task) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [instance](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [instance-connect-endpoint](#list_ec2-resource-instance-connect-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
- **Resource types (\*required):** [instance-event-window](#list_ec2-resource-instance-event-window) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [internet-gateway](#list_ec2-resource-internet-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:InternetGatewayID](#list_ec2-ec2_InternetGatewayID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam](#list_ec2-resource-ipam) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-external-resource-verification-token](#list_ec2-resource-ipam-external-resource-verification-token) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-policy](#list_ec2-resource-ipam-policy) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-pool](#list_ec2-resource-ipam-pool) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-pool-allocation](#list_ec2-resource-ipam-pool-allocation) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-prefix-list-resolver](#list_ec2-resource-ipam-prefix-list-resolver) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-prefix-list-resolver-target](#list_ec2-resource-ipam-prefix-list-resolver-target) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-resource-discovery](#list_ec2-resource-ipam-resource-discovery) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-resource-discovery-association](#list_ec2-resource-ipam-resource-discovery-association) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-scope](#list_ec2-resource-ipam-scope) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipv4pool-ec2](#list_ec2-resource-ipv4pool-ec2) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipv6pool-ec2](#list_ec2-resource-ipv6pool-ec2) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [key-pair](#list_ec2-resource-key-pair) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KeyPairName](#list_ec2-ec2_KeyPairName)
[ec2:KeyPairType](#list_ec2-ec2_KeyPairType)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [launch-template](#list_ec2-resource-launch-template) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [local-gateway](#list_ec2-resource-local-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [local-gateway-route-table](#list_ec2-resource-local-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [local-gateway-route-table-virtual-interface-group-association](#list_ec2-resource-local-gateway-route-table-virtual-interface-group-association) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [local-gateway-route-table-vpc-association](#list_ec2-resource-local-gateway-route-table-vpc-association) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [local-gateway-virtual-interface](#list_ec2-resource-local-gateway-virtual-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [local-gateway-virtual-interface-group](#list_ec2-resource-local-gateway-virtual-interface-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [natgateway](#list_ec2-resource-natgateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [network-acl](#list_ec2-resource-network-acl) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:NetworkAclID](#list_ec2-ec2_NetworkAclID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [network-insights-access-scope](#list_ec2-resource-network-insights-access-scope) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [network-insights-access-scope-analysis](#list_ec2-resource-network-insights-access-scope-analysis) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [network-insights-analysis](#list_ec2-resource-network-insights-analysis) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [network-insights-path](#list_ec2-resource-network-insights-path) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [network-interface](#list_ec2-resource-network-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [placement-group](#list_ec2-resource-placement-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:PlacementGroupName](#list_ec2-ec2_PlacementGroupName)
[ec2:PlacementGroupStrategy](#list_ec2-ec2_PlacementGroupStrategy)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [prefix-list](#list_ec2-resource-prefix-list) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:IpamPrefixListResolverTargetId](#list_ec2-ec2_IpamPrefixListResolverTargetId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [replace-root-volume-task](#list_ec2-resource-replace-root-volume-task) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [reserved-instances](#list_ec2-resource-reserved-instances) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ReservedInstancesOfferingType](#list_ec2-ec2_ReservedInstancesOfferingType)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [route-server](#list_ec2-resource-route-server) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [route-server-endpoint](#list_ec2-resource-route-server-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [route-server-peer](#list_ec2-resource-route-server-peer) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [route-table](#list_ec2-resource-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RouteTableID](#list_ec2-ec2_RouteTableID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [secondary-interface](#list_ec2-resource-secondary-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [secondary-network](#list_ec2-resource-secondary-network) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [secondary-subnet](#list_ec2-resource-secondary-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [security-group](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [security-group-rule](#list_ec2-resource-security-group-rule) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [snapshot](#list_ec2-resource-snapshot) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Resource types (\*required):** [spot-fleet-request](#list_ec2-resource-spot-fleet-request) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [spot-instances-request](#list_ec2-resource-spot-instances-request) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [subnet-cidr-reservation](#list_ec2-resource-subnet-cidr-reservation) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [traffic-mirror-filter](#list_ec2-resource-traffic-mirror-filter) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [traffic-mirror-filter-rule](#list_ec2-resource-traffic-mirror-filter-rule) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [traffic-mirror-session](#list_ec2-resource-traffic-mirror-session) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [traffic-mirror-target](#list_ec2-resource-traffic-mirror-target) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [transit-gateway](#list_ec2-resource-transit-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayId](#list_ec2-ec2_transitGatewayId)
- **Resource types (\*required):** [transit-gateway-attachment](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [transit-gateway-connect-peer](#list_ec2-resource-transit-gateway-connect-peer) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayConnectPeerId](#list_ec2-ec2_transitGatewayConnectPeerId)
- **Resource types (\*required):** [transit-gateway-metering-policy](#list_ec2-resource-transit-gateway-metering-policy) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMeteringPolicyId](#list_ec2-ec2_transitGatewayMeteringPolicyId)
- **Resource types (\*required):** [transit-gateway-multicast-domain](#list_ec2-resource-transit-gateway-multicast-domain) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMulticastDomainId](#list_ec2-ec2_transitGatewayMulticastDomainId)
- **Resource types (\*required):** [transit-gateway-policy-table](#list_ec2-resource-transit-gateway-policy-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayPolicyTableId](#list_ec2-ec2_transitGatewayPolicyTableId)
- **Resource types (\*required):** [transit-gateway-route-table](#list_ec2-resource-transit-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableId](#list_ec2-ec2_transitGatewayRouteTableId)
- **Resource types (\*required):** [transit-gateway-route-table-announcement](#list_ec2-resource-transit-gateway-route-table-announcement) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableAnnouncementId](#list_ec2-ec2_transitGatewayRouteTableAnnouncementId)
- **Resource types (\*required):** [verified-access-endpoint](#list_ec2-resource-verified-access-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [verified-access-endpoint-target](#list_ec2-resource-verified-access-endpoint-target) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [verified-access-group](#list_ec2-resource-verified-access-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [verified-access-instance](#list_ec2-resource-verified-access-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [verified-access-policy](#list_ec2-resource-verified-access-policy) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [verified-access-trust-provider](#list_ec2-resource-verified-access-trust-provider) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [volume](#list_ec2-resource-volume) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType)
- **Resource types (\*required):** [vpc](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Resource types (\*required):** [vpc-block-public-access-exclusion](#list_ec2-resource-vpc-block-public-access-exclusion) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpc-encryption-control](#list_ec2-resource-vpc-encryption-control) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpc-endpoint](#list_ec2-resource-vpc-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpcePrivateDnsPreference](#list_ec2-ec2_VpcePrivateDnsPreference)
[ec2:VpcePrivateDnsSpecifiedDomains](#list_ec2-ec2_VpcePrivateDnsSpecifiedDomains)
[ec2:VpceServiceName](#list_ec2-ec2_VpceServiceName)
[ec2:VpceServiceOwner](#list_ec2-ec2_VpceServiceOwner)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
- **Resource types (\*required):** [vpc-endpoint-connection](#list_ec2-resource-vpc-endpoint-connection) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpc-endpoint-service](#list_ec2-resource-vpc-endpoint-service) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpceServicePrivateDnsName](#list_ec2-ec2_VpceServicePrivateDnsName)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
[ec2:VpceSupportedRegion](#list_ec2-ec2_VpceSupportedRegion)
- **Resource types (\*required):** [vpc-endpoint-service-permission](#list_ec2-resource-vpc-endpoint-service-permission) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpc-flow-log](#list_ec2-resource-vpc-flow-log) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpc-peering-connection](#list_ec2-resource-vpc-peering-connection) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AccepterVpc](#list_ec2-ec2_AccepterVpc)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RequesterVpc](#list_ec2-ec2_RequesterVpc)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpcPeeringConnectionID](#list_ec2-ec2_VpcPeeringConnectionID)
- **Resource types (\*required):** [vpn-concentrator](#list_ec2-resource-vpn-concentrator) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpn-connection](#list_ec2-resource-vpn-connection) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthenticationType](#list_ec2-ec2_AuthenticationType)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:DPDTimeoutSeconds](#list_ec2-ec2_DPDTimeoutSeconds)
[ec2:GatewayType](#list_ec2-ec2_GatewayType)
[ec2:IKEVersions](#list_ec2-ec2_IKEVersions)
[ec2:InsideTunnelCidr](#list_ec2-ec2_InsideTunnelCidr)
[ec2:InsideTunnelIpv6Cidr](#list_ec2-ec2_InsideTunnelIpv6Cidr)
[ec2:Phase1DHGroup](#list_ec2-ec2_Phase1DHGroup)
[ec2:Phase1EncryptionAlgorithms](#list_ec2-ec2_Phase1EncryptionAlgorithms)
[ec2:Phase1IntegrityAlgorithms](#list_ec2-ec2_Phase1IntegrityAlgorithms)
[ec2:Phase1LifetimeSeconds](#list_ec2-ec2_Phase1LifetimeSeconds)
[ec2:Phase2DHGroup](#list_ec2-ec2_Phase2DHGroup)
[ec2:Phase2EncryptionAlgorithms](#list_ec2-ec2_Phase2EncryptionAlgorithms)
[ec2:Phase2IntegrityAlgorithms](#list_ec2-ec2_Phase2IntegrityAlgorithms)
[ec2:Phase2LifetimeSeconds](#list_ec2-ec2_Phase2LifetimeSeconds)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RekeyFuzzPercentage](#list_ec2-ec2_RekeyFuzzPercentage)
[ec2:RekeyMarginTimeSeconds](#list_ec2-ec2_RekeyMarginTimeSeconds)
[ec2:ReplayWindowSizePackets](#list_ec2-ec2_ReplayWindowSizePackets)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RoutingType](#list_ec2-ec2_RoutingType)
- **Resource types (\*required):** [vpn-gateway](#list_ec2-resource-vpn-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:CreateAction](#list_ec2-ec2_CreateAction)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Tagging, Write
- ** [CreateTrafficMirrorFilter](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateTrafficMirrorFilter.html) **
- **Description:** Grants permission to create a traffic mirror filter
- **Resource types (\*required):** [traffic-mirror-filter\*](#list_ec2-resource-traffic-mirror-filter)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateTrafficMirrorFilterRule](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateTrafficMirrorFilterRule.html) **
- **Description:** Grants permission to create a traffic mirror filter rule
- **Resource types (\*required):** [traffic-mirror-filter\*](#list_ec2-resource-traffic-mirror-filter) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [traffic-mirror-filter-rule\*](#list_ec2-resource-traffic-mirror-filter-rule) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateTrafficMirrorSession](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateTrafficMirrorSession.html) **
- **Description:** Grants permission to create a traffic mirror session
- **Resource types (\*required):** [network-interface\*](#list_ec2-resource-network-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [traffic-mirror-filter\*](#list_ec2-resource-traffic-mirror-filter) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [traffic-mirror-session\*](#list_ec2-resource-traffic-mirror-session) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [traffic-mirror-target\*](#list_ec2-resource-traffic-mirror-target) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateTrafficMirrorTarget](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateTrafficMirrorTarget.html) **
- **Description:** Grants permission to create a traffic mirror target
- **Resource types (\*required):** [network-interface](#list_ec2-resource-network-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [traffic-mirror-target\*](#list_ec2-resource-traffic-mirror-target) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpc-endpoint](#list_ec2-resource-vpc-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpcePrivateDnsPreference](#list_ec2-ec2_VpcePrivateDnsPreference)
[ec2:VpcePrivateDnsSpecifiedDomains](#list_ec2-ec2_VpcePrivateDnsSpecifiedDomains)
[ec2:VpceServiceName](#list_ec2-ec2_VpceServiceName)
[ec2:VpceServiceOwner](#list_ec2-ec2_VpceServiceOwner)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
- **Access level:** Write
- ** [CreateTransitGateway](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateTransitGateway.html) **
- **Description:** Grants permission to create a transit gateway
- **Resource types (\*required):** [transit-gateway\*](#list_ec2-resource-transit-gateway)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayId](#list_ec2-ec2_transitGatewayId)
- **Access level:** Write
- ** [CreateTransitGatewayConnect](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateTransitGatewayConnect.html) **
- **Description:** Grants permission to create a Connect attachment from a specified transit gateway attachment
- **Resource types (\*required):** [transit-gateway-attachment\*](#list_ec2-resource-transit-gateway-attachment)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Access level:** Write
- ** [CreateTransitGatewayConnectPeer](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateTransitGatewayConnectPeer.html) **
- **Description:** Grants permission to create a Connect peer between a transit gateway and an appliance
- **Resource types (\*required):** [transit-gateway-attachment\*](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [transit-gateway-connect-peer\*](#list_ec2-resource-transit-gateway-connect-peer) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayConnectPeerId](#list_ec2-ec2_transitGatewayConnectPeerId)
- **Access level:** Write
- ** [CreateTransitGatewayMeteringPolicy](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateTransitGatewayMeteringPolicy.html) **
- **Description:** Grants permission to create a metering policy for a transit gateway
- **Resource types (\*required):** [transit-gateway\*](#list_ec2-resource-transit-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayId](#list_ec2-ec2_transitGatewayId)
- **Resource types (\*required):** [transit-gateway-attachment](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [transit-gateway-metering-policy\*](#list_ec2-resource-transit-gateway-metering-policy) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMeteringPolicyId](#list_ec2-ec2_transitGatewayMeteringPolicyId)
- **Access level:** Write
- ** [CreateTransitGatewayMeteringPolicyEntry](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateTransitGatewayMeteringPolicyEntry.html) **
- **Description:** Grants permission to create an entry for a transit gateway metering policy
- **Resource types (\*required):** [transit-gateway-attachment](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [transit-gateway-metering-policy\*](#list_ec2-resource-transit-gateway-metering-policy) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMeteringPolicyId](#list_ec2-ec2_transitGatewayMeteringPolicyId)
- **Access level:** Write
- ** [CreateTransitGatewayMulticastDomain](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateTransitGatewayMulticastDomain.html) **
- **Description:** Grants permission to create a multicast domain for a transit gateway
- **Resource types (\*required):** [transit-gateway\*](#list_ec2-resource-transit-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayId](#list_ec2-ec2_transitGatewayId)
- **Resource types (\*required):** [transit-gateway-multicast-domain\*](#list_ec2-resource-transit-gateway-multicast-domain) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMulticastDomainId](#list_ec2-ec2_transitGatewayMulticastDomainId)
- **Access level:** Write
- ** [CreateTransitGatewayPeeringAttachment](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateTransitGatewayPeeringAttachment.html) **
- **Description:** Grants permission to request a transit gateway peering attachment between a requester and accepter transit gateway
- **Resource types (\*required):** [transit-gateway\*](#list_ec2-resource-transit-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayId](#list_ec2-ec2_transitGatewayId)
- **Resource types (\*required):** [transit-gateway-attachment\*](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Access level:** Write
- ** [CreateTransitGatewayPolicyTable](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateTransitGatewayPolicyTable.html) **
- **Description:** Grants permission to create a transit gateway policy table
- **Resource types (\*required):** [transit-gateway\*](#list_ec2-resource-transit-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayId](#list_ec2-ec2_transitGatewayId)
- **Resource types (\*required):** [transit-gateway-policy-table\*](#list_ec2-resource-transit-gateway-policy-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayPolicyTableId](#list_ec2-ec2_transitGatewayPolicyTableId)
- **Access level:** Write
- ** [CreateTransitGatewayPrefixListReference](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateTransitGatewayPrefixListReference.html) **
- **Description:** Grants permission to create a transit gateway prefix list reference
- **Resource types (\*required):** [prefix-list\*](#list_ec2-resource-prefix-list) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IpamPrefixListResolverTargetId](#list_ec2-ec2_IpamPrefixListResolverTargetId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [transit-gateway-attachment](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [transit-gateway-route-table\*](#list_ec2-resource-transit-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableId](#list_ec2-ec2_transitGatewayRouteTableId)
- **Access level:** Write
- ** [CreateTransitGatewayRoute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateTransitGatewayRoute.html) **
- **Description:** Grants permission to create a static route for a transit gateway route table
- **Resource types (\*required):** [transit-gateway-attachment](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [transit-gateway-route-table\*](#list_ec2-resource-transit-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableId](#list_ec2-ec2_transitGatewayRouteTableId)
- **Access level:** Write
- ** [CreateTransitGatewayRouteTable](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateTransitGatewayRouteTable.html) **
- **Description:** Grants permission to create a route table for a transit gateway
- **Resource types (\*required):** [transit-gateway\*](#list_ec2-resource-transit-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayId](#list_ec2-ec2_transitGatewayId)
- **Resource types (\*required):** [transit-gateway-route-table\*](#list_ec2-resource-transit-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableId](#list_ec2-ec2_transitGatewayRouteTableId)
- **Access level:** Write
- ** [CreateTransitGatewayRouteTableAnnouncement](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateTransitGatewayRouteTableAnnouncement.html) **
- **Description:** Grants permission to create an announcement for a transit gateway route table
- **Resource types (\*required):** [transit-gateway-attachment\*](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [transit-gateway-route-table\*](#list_ec2-resource-transit-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableId](#list_ec2-ec2_transitGatewayRouteTableId)
- **Resource types (\*required):** [transit-gateway-route-table-announcement\*](#list_ec2-resource-transit-gateway-route-table-announcement) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableAnnouncementId](#list_ec2-ec2_transitGatewayRouteTableAnnouncementId)
- **Access level:** Write
- ** [CreateTransitGatewayVpcAttachment](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateTransitGatewayVpcAttachment.html) **
- **Description:** Grants permission to attach a VPC to a transit gateway
- **Resource types (\*required):** [subnet\*](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [transit-gateway\*](#list_ec2-resource-transit-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayId](#list_ec2-ec2_transitGatewayId)
- **Resource types (\*required):** [transit-gateway-attachment\*](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [CreateVerifiedAccessEndpoint](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateVerifiedAccessEndpoint.html) **
- **Description:** Grants permission to create a Verified Access endpoint
- **Resource types (\*required):** [network-interface](#list_ec2-resource-network-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [security-group](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [verified-access-endpoint\*](#list_ec2-resource-verified-access-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [verified-access-group\*](#list_ec2-resource-verified-access-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateVerifiedAccessGroup](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateVerifiedAccessGroup.html) **
- **Description:** Grants permission to create a Verified Access group
- **Resource types (\*required):** [verified-access-group\*](#list_ec2-resource-verified-access-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [verified-access-instance\*](#list_ec2-resource-verified-access-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateVerifiedAccessInstance](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateVerifiedAccessInstance.html) **
- **Description:** Grants permission to create a Verified Access instance
- **Resource types (\*required):** [verified-access-instance\*](#list_ec2-resource-verified-access-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateVerifiedAccessTrustProvider](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateVerifiedAccessTrustProvider.html) **
- **Description:** Grants permission to create a verified trust provider
- **Resource types (\*required):** [verified-access-trust-provider\*](#list_ec2-resource-verified-access-trust-provider)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateVolume](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateVolume.html) **
- **Description:** Grants permission to create an EBS volume
- **Resource types (\*required):** [snapshot](#list_ec2-resource-snapshot) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Resource types (\*required):** [volume\*](#list_ec2-resource-volume) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType)
- **Access level:** Write
- ** [CreateVpc](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateVpc.html) **
- **Description:** Grants permission to create a VPC with a specified CIDR block
- **Resource types (\*required):** [ipam-pool](#list_ec2-resource-ipam-pool) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipv6pool-ec2](#list_ec2-resource-ipv6pool-ec2) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [CreateVpcBlockPublicAccessExclusion](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateVpcBlockPublicAccessExclusion.html) **
- **Description:** Grants permission to create an exclusion list for blocked public access on a VPC
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [vpc](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Resource types (\*required):** [vpc-block-public-access-exclusion\*](#list_ec2-resource-vpc-block-public-access-exclusion) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateVpcEncryptionControl](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateVpcEncryptionControl.html) **
- **Description:** Grants permission to create a VPC Encryption Control
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Resource types (\*required):** [vpc-encryption-control\*](#list_ec2-resource-vpc-encryption-control) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateVpcEndpoint](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateVpcEndpoint.html) **
- **Description:** Grants permission to create a VPC endpoint for an Amazon service
- **Resource types (\*required):** [route-table](#list_ec2-resource-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RouteTableID](#list_ec2-ec2_RouteTableID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [security-group](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Resource types (\*required):** [vpc-endpoint\*](#list_ec2-resource-vpc-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpcePrivateDnsPreference](#list_ec2-ec2_VpcePrivateDnsPreference)
[ec2:VpcePrivateDnsSpecifiedDomains](#list_ec2-ec2_VpcePrivateDnsSpecifiedDomains)
[ec2:VpceServiceName](#list_ec2-ec2_VpceServiceName)
[ec2:VpceServiceOwner](#list_ec2-ec2_VpceServiceOwner)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
- **Access level:** Write
- ** [CreateVpcEndpointConnectionNotification](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateVpcEndpointConnectionNotification.html) **
- **Description:** Grants permission to create a connection notification for a VPC endpoint or VPC endpoint service
- **Resource types (\*required):** [vpc-endpoint](#list_ec2-resource-vpc-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpcePrivateDnsPreference](#list_ec2-ec2_VpcePrivateDnsPreference)
[ec2:VpcePrivateDnsSpecifiedDomains](#list_ec2-ec2_VpcePrivateDnsSpecifiedDomains)
[ec2:VpceServiceName](#list_ec2-ec2_VpceServiceName)
[ec2:VpceServiceOwner](#list_ec2-ec2_VpceServiceOwner)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
- **Resource types (\*required):** [vpc-endpoint-service](#list_ec2-resource-vpc-endpoint-service) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpceServicePrivateDnsName](#list_ec2-ec2_VpceServicePrivateDnsName)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
[ec2:VpceSupportedRegion](#list_ec2-ec2_VpceSupportedRegion)
- **Access level:** Write
- ** [CreateVpcEndpointServiceConfiguration](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateVpcEndpointServiceConfiguration.html) **
- **Description:** Grants permission to create a VPC endpoint service configuration to which service consumers (Amazon accounts, IAM users, and IAM roles) can connect
- **Resource types (\*required):** [vpc-endpoint-service\*](#list_ec2-resource-vpc-endpoint-service)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpceServicePrivateDnsName](#list_ec2-ec2_VpceServicePrivateDnsName)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
[ec2:VpceSupportedRegion](#list_ec2-ec2_VpceSupportedRegion)
- **Access level:** Write
- ** [CreateVpcPeeringConnection](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateVpcPeeringConnection.html) **
- **Description:** Grants permission to request a VPC peering connection between two VPCs
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Resource types (\*required):** [vpc-peering-connection\*](#list_ec2-resource-vpc-peering-connection) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AccepterVpc](#list_ec2-ec2_AccepterVpc)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RequesterVpc](#list_ec2-ec2_RequesterVpc)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpcPeeringConnectionID](#list_ec2-ec2_VpcPeeringConnectionID)
- **Access level:** Write
- ** [CreateVpnConcentrator](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateVpnConcentrator.html) **
- **Description:** Grants permission to create a VPN concentrator that aggregates multiple VPN connections to a transit gateway
- **Resource types (\*required):** [transit-gateway](#list_ec2-resource-transit-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayId](#list_ec2-ec2_transitGatewayId)
- **Resource types (\*required):** [vpn-concentrator\*](#list_ec2-resource-vpn-concentrator) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateVpnConnection](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateVpnConnection.html) **
- **Description:** Grants permission to create a VPN connection between a virtual private gateway or transit gateway and a customer gateway
- **Resource types (\*required):** [customer-gateway\*](#list_ec2-resource-customer-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [transit-gateway](#list_ec2-resource-transit-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayId](#list_ec2-ec2_transitGatewayId)
- **Resource types (\*required):** [transit-gateway-attachment](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [vpn-concentrator](#list_ec2-resource-vpn-concentrator) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpn-connection\*](#list_ec2-resource-vpn-connection) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthenticationType](#list_ec2-ec2_AuthenticationType)
[ec2:DPDTimeoutSeconds](#list_ec2-ec2_DPDTimeoutSeconds)
[ec2:GatewayType](#list_ec2-ec2_GatewayType)
[ec2:IKEVersions](#list_ec2-ec2_IKEVersions)
[ec2:InsideTunnelCidr](#list_ec2-ec2_InsideTunnelCidr)
[ec2:InsideTunnelIpv6Cidr](#list_ec2-ec2_InsideTunnelIpv6Cidr)
[ec2:Phase1DHGroup](#list_ec2-ec2_Phase1DHGroup)
[ec2:Phase1EncryptionAlgorithms](#list_ec2-ec2_Phase1EncryptionAlgorithms)
[ec2:Phase1IntegrityAlgorithms](#list_ec2-ec2_Phase1IntegrityAlgorithms)
[ec2:Phase1LifetimeSeconds](#list_ec2-ec2_Phase1LifetimeSeconds)
[ec2:Phase2DHGroup](#list_ec2-ec2_Phase2DHGroup)
[ec2:Phase2EncryptionAlgorithms](#list_ec2-ec2_Phase2EncryptionAlgorithms)
[ec2:Phase2IntegrityAlgorithms](#list_ec2-ec2_Phase2IntegrityAlgorithms)
[ec2:Phase2LifetimeSeconds](#list_ec2-ec2_Phase2LifetimeSeconds)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RekeyFuzzPercentage](#list_ec2-ec2_RekeyFuzzPercentage)
[ec2:RekeyMarginTimeSeconds](#list_ec2-ec2_RekeyMarginTimeSeconds)
[ec2:ReplayWindowSizePackets](#list_ec2-ec2_ReplayWindowSizePackets)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RoutingType](#list_ec2-ec2_RoutingType)
- **Resource types (\*required):** [vpn-gateway](#list_ec2-resource-vpn-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [CreateVpnConnectionRoute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateVpnConnectionRoute.html) **
- **Description:** Grants permission to create a static route for a VPN connection between a virtual private gateway and a customer gateway
- **Resource types (\*required):** [vpn-connection\*](#list_ec2-resource-vpn-connection)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthenticationType](#list_ec2-ec2_AuthenticationType)
[ec2:DPDTimeoutSeconds](#list_ec2-ec2_DPDTimeoutSeconds)
[ec2:GatewayType](#list_ec2-ec2_GatewayType)
[ec2:IKEVersions](#list_ec2-ec2_IKEVersions)
[ec2:InsideTunnelCidr](#list_ec2-ec2_InsideTunnelCidr)
[ec2:InsideTunnelIpv6Cidr](#list_ec2-ec2_InsideTunnelIpv6Cidr)
[ec2:Phase1DHGroup](#list_ec2-ec2_Phase1DHGroup)
[ec2:Phase1EncryptionAlgorithms](#list_ec2-ec2_Phase1EncryptionAlgorithms)
[ec2:Phase1IntegrityAlgorithms](#list_ec2-ec2_Phase1IntegrityAlgorithms)
[ec2:Phase1LifetimeSeconds](#list_ec2-ec2_Phase1LifetimeSeconds)
[ec2:Phase2DHGroup](#list_ec2-ec2_Phase2DHGroup)
[ec2:Phase2EncryptionAlgorithms](#list_ec2-ec2_Phase2EncryptionAlgorithms)
[ec2:Phase2IntegrityAlgorithms](#list_ec2-ec2_Phase2IntegrityAlgorithms)
[ec2:Phase2LifetimeSeconds](#list_ec2-ec2_Phase2LifetimeSeconds)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RekeyFuzzPercentage](#list_ec2-ec2_RekeyFuzzPercentage)
[ec2:RekeyMarginTimeSeconds](#list_ec2-ec2_RekeyMarginTimeSeconds)
[ec2:ReplayWindowSizePackets](#list_ec2-ec2_ReplayWindowSizePackets)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RoutingType](#list_ec2-ec2_RoutingType)
- **Access level:** Write
- ** [CreateVpnGateway](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateVpnGateway.html) **
- **Description:** Grants permission to create a virtual private gateway
- **Resource types (\*required):** [vpn-gateway\*](#list_ec2-resource-vpn-gateway)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteCapacityManagerDataExport](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteCapacityManagerDataExport.html) **
- **Description:** Grants permission to delete an existing Capacity Manager data export configuration
- **Resource types (\*required):** [capacity-manager-data-export\*](#list_ec2-resource-capacity-manager-data-export)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteCarrierGateway](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteCarrierGateway.html) **
- **Description:** Grants permission to delete a carrier gateway
- **Resource types (\*required):** [carrier-gateway\*](#list_ec2-resource-carrier-gateway)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [DeleteClientVpnEndpoint](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteClientVpnEndpoint.html) **
- **Description:** Grants permission to delete a Client VPN endpoint
- **Resource types (\*required):** [client-vpn-endpoint\*](#list_ec2-resource-client-vpn-endpoint)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ClientRootCertificateChainArn](#list_ec2-ec2_ClientRootCertificateChainArn)
[ec2:CloudwatchLogGroupArn](#list_ec2-ec2_CloudwatchLogGroupArn)
[ec2:CloudwatchLogStreamArn](#list_ec2-ec2_CloudwatchLogStreamArn)
[ec2:DirectoryArn](#list_ec2-ec2_DirectoryArn)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SamlProviderArn](#list_ec2-ec2_SamlProviderArn)
[ec2:ServerCertificateArn](#list_ec2-ec2_ServerCertificateArn)
- **Access level:** Write
- ** [DeleteClientVpnRoute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteClientVpnRoute.html) **
- **Description:** Grants permission to delete a route from a Client VPN endpoint
- **Resource types (\*required):** [client-vpn-endpoint\*](#list_ec2-resource-client-vpn-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ClientRootCertificateChainArn](#list_ec2-ec2_ClientRootCertificateChainArn)
[ec2:CloudwatchLogGroupArn](#list_ec2-ec2_CloudwatchLogGroupArn)
[ec2:CloudwatchLogStreamArn](#list_ec2-ec2_CloudwatchLogStreamArn)
[ec2:DirectoryArn](#list_ec2-ec2_DirectoryArn)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SamlProviderArn](#list_ec2-ec2_SamlProviderArn)
[ec2:ServerCertificateArn](#list_ec2-ec2_ServerCertificateArn)
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [DeleteCoipCidr](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteCoipCidr.html) **
- **Description:** Grants permission to delete a range of customer-owned IP (CoIP) addresses
- **Resource types (\*required):** [coip-pool\*](#list_ec2-resource-coip-pool)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteCoipPool](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteCoipPool.html) **
- **Description:** Grants permission to delete a pool of customer-owned IP (CoIP) addresses
- **Resource types (\*required):** [coip-pool\*](#list_ec2-resource-coip-pool)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteCustomerGateway](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteCustomerGateway.html) **
- **Description:** Grants permission to delete a customer gateway
- **Resource types (\*required):** [customer-gateway\*](#list_ec2-resource-customer-gateway)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteDhcpOptions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteDhcpOptions.html) **
- **Description:** Grants permission to delete a set of DHCP options
- **Resource types (\*required):** [dhcp-options\*](#list_ec2-resource-dhcp-options)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:DhcpOptionsID](#list_ec2-ec2_DhcpOptionsID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteEgressOnlyInternetGateway](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteEgressOnlyInternetGateway.html) **
- **Description:** Grants permission to delete an egress-only internet gateway
- **Resource types (\*required):** [egress-only-internet-gateway\*](#list_ec2-resource-egress-only-internet-gateway)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteFleets](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteFleets.html) **
- **Description:** Grants permission to delete one or more EC2 Fleets
- **Resource types (\*required):** [fleet\*](#list_ec2-resource-fleet)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteFlowLogs](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteFlowLogs.html) **
- **Description:** Grants permission to delete one or more flow logs
- **Resource types (\*required):** [vpc-flow-log\*](#list_ec2-resource-vpc-flow-log)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteFpgaImage](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteFpgaImage.html) **
- **Description:** Grants permission to delete an Amazon FPGA Image (AFI)
- **Resource types (\*required):** [fpga-image\*](#list_ec2-resource-fpga-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteImageUsageReport](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteImageUsageReport.html) **
- **Description:** Grants permission to delete an AMI usage report
- **Resource types (\*required):** [image-usage-report\*](#list_ec2-resource-image-usage-report)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteInstanceConnectEndpoint](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteInstanceConnectEndpoint.html) **
- **Description:** Grants permission to delete an EC2 Instance Connect Endpoint
- **Resource types (\*required):** [instance-connect-endpoint\*](#list_ec2-resource-instance-connect-endpoint)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
- **Access level:** Write
- ** [DeleteInstanceEventWindow](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteInstanceEventWindow.html) **
- **Description:** Grants permission to delete the specified event window
- **Resource types (\*required):** [instance-event-window\*](#list_ec2-resource-instance-event-window)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteInternetGateway](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteInternetGateway.html) **
- **Description:** Grants permission to delete an internet gateway
- **Resource types (\*required):** [internet-gateway\*](#list_ec2-resource-internet-gateway)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:InternetGatewayID](#list_ec2-ec2_InternetGatewayID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteIpam](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteIpam.html) **
- **Description:** Grants permission to delete an Amazon VPC IP Address Manager (IPAM) and remove all monitored data associated with the IPAM including the historical data for CIDRs
- **Resource types (\*required):** [ipam\*](#list_ec2-resource-ipam)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteIpamExternalResourceVerificationToken](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteIpamExternalResourceVerificationToken.html) **
- **Description:** Grants permission to delete a verification token, which proves ownership of an external resource
- **Resource types (\*required):** [ipam-external-resource-verification-token\*](#list_ec2-resource-ipam-external-resource-verification-token)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteIpamPolicy](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteIpamPolicy.html) **
- **Description:** Grants permission to delete an Amazon VPC IP Address Manager (IPAM) policy
- **Resource types (\*required):** [ipam-policy\*](#list_ec2-resource-ipam-policy)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteIpamPool](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteIpamPool.html) **
- **Description:** Grants permission to delete an Amazon VPC IP Address Manager (IPAM) pool
- **Resource types (\*required):** [ipam-pool\*](#list_ec2-resource-ipam-pool)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteIpamPrefixListResolver](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteIpamPrefixListResolver.html) **
- **Description:** Grants permission to delete an IPAM prefix list resolver
- **Resource types (\*required):** [ipam-prefix-list-resolver\*](#list_ec2-resource-ipam-prefix-list-resolver)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteIpamPrefixListResolverTarget](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteIpamPrefixListResolverTarget.html) **
- **Description:** Grants permission to delete an IPAM prefix list resolver target
- **Resource types (\*required):** [ipam-prefix-list-resolver-target\*](#list_ec2-resource-ipam-prefix-list-resolver-target)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteIpamResourceDiscovery](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteIpamResourceDiscovery.html) **
- **Description:** Grants permission to delete an IPAM resource discovery
- **Resource types (\*required):** [ipam-resource-discovery\*](#list_ec2-resource-ipam-resource-discovery)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteIpamScope](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteIpamScope.html) **
- **Description:** Grants permission to delete the scope for an Amazon VPC IP Address Manager (IPAM)
- **Resource types (\*required):** [ipam-scope\*](#list_ec2-resource-ipam-scope)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteKeyPair](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteKeyPair.html) **
- **Description:** Grants permission to delete a key pair by removing the public key from Amazon EC2
- **Resource types (\*required):** [key-pair](#list_ec2-resource-key-pair)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KeyPairName](#list_ec2-ec2_KeyPairName)
[ec2:KeyPairType](#list_ec2-ec2_KeyPairType)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteLaunchTemplate](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteLaunchTemplate.html) **
- **Description:** Grants permission to delete a launch template and its associated versions
- **Resource types (\*required):** [launch-template\*](#list_ec2-resource-launch-template)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteLaunchTemplateVersions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteLaunchTemplateVersions.html) **
- **Description:** Grants permission to delete one or more versions of a launch template
- **Resource types (\*required):** [launch-template\*](#list_ec2-resource-launch-template)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteLocalGatewayRoute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteLocalGatewayRoute.html) **
- **Description:** Grants permission to delete a route from a local gateway route table
- **Resource types (\*required):** [local-gateway-route-table\*](#list_ec2-resource-local-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [prefix-list](#list_ec2-resource-prefix-list) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IpamPrefixListResolverTargetId](#list_ec2-ec2_IpamPrefixListResolverTargetId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteLocalGatewayRouteTable](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteLocalGatewayRouteTable.html) **
- **Description:** Grants permission to delete a local gateway route table
- **Resource types (\*required):** [local-gateway-route-table\*](#list_ec2-resource-local-gateway-route-table)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteLocalGatewayRouteTableVirtualInterfaceGroupAssociation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteLocalGatewayRouteTableVirtualInterfaceGroupAssociation.html) **
- **Description:** Grants permission to delete a local gateway route table virtual interface group association
- **Resource types (\*required):** [local-gateway-route-table-virtual-interface-group-association\*](#list_ec2-resource-local-gateway-route-table-virtual-interface-group-association)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteLocalGatewayRouteTableVpcAssociation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteLocalGatewayRouteTableVpcAssociation.html) **
- **Description:** Grants permission to delete an association between a VPC and local gateway route table
- **Resource types (\*required):** [local-gateway-route-table-vpc-association\*](#list_ec2-resource-local-gateway-route-table-vpc-association)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteLocalGatewayVirtualInterface](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteLocalGatewayVirtualInterface.html) **
- **Description:** Grants permission to delete a local gateway virtual interface
- **Resource types (\*required):** [local-gateway-virtual-interface\*](#list_ec2-resource-local-gateway-virtual-interface)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteLocalGatewayVirtualInterfaceGroup](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteLocalGatewayVirtualInterfaceGroup.html) **
- **Description:** Grants permission to delete a local gateway virtual interface group
- **Resource types (\*required):** [local-gateway-virtual-interface-group\*](#list_ec2-resource-local-gateway-virtual-interface-group)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteManagedPrefixList](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteManagedPrefixList.html) **
- **Description:** Grants permission to delete a managed prefix list
- **Resource types (\*required):** [prefix-list\*](#list_ec2-resource-prefix-list)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IpamPrefixListResolverTargetId](#list_ec2-ec2_IpamPrefixListResolverTargetId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteNatGateway](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteNatGateway.html) **
- **Description:** Grants permission to delete a NAT gateway
- **Resource types (\*required):** [natgateway\*](#list_ec2-resource-natgateway)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [DeleteNetworkAcl](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteNetworkAcl.html) **
- **Description:** Grants permission to delete a network ACL
- **Resource types (\*required):** [network-acl\*](#list_ec2-resource-network-acl)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:NetworkAclID](#list_ec2-ec2_NetworkAclID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [DeleteNetworkAclEntry](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteNetworkAclEntry.html) **
- **Description:** Grants permission to delete an inbound or outbound entry (rule) from a network ACL
- **Resource types (\*required):** [network-acl\*](#list_ec2-resource-network-acl)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:NetworkAclID](#list_ec2-ec2_NetworkAclID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [DeleteNetworkInsightsAccessScope](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteNetworkInsightsAccessScope.html) **
- **Description:** Grants permission to delete a Network Access Scope
- **Resource types (\*required):** [network-insights-access-scope\*](#list_ec2-resource-network-insights-access-scope)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteNetworkInsightsAccessScopeAnalysis](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteNetworkInsightsAccessScopeAnalysis.html) **
- **Description:** Grants permission to delete a Network Access Scope analysis
- **Resource types (\*required):** [network-insights-access-scope-analysis\*](#list_ec2-resource-network-insights-access-scope-analysis)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteNetworkInsightsAnalysis](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteNetworkInsightsAnalysis.html) **
- **Description:** Grants permission to delete a network insights analysis
- **Resource types (\*required):** [network-insights-analysis\*](#list_ec2-resource-network-insights-analysis)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteNetworkInsightsPath](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteNetworkInsightsPath.html) **
- **Description:** Grants permission to delete a network insights path
- **Resource types (\*required):** [network-insights-path\*](#list_ec2-resource-network-insights-path)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteNetworkInterface](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteNetworkInterface.html) **
- **Description:** Grants permission to delete a detached network interface
- **Resource types (\*required):** [network-interface\*](#list_ec2-resource-network-interface)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [DeleteNetworkInterfacePermission](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteNetworkInterfacePermission.html) **
- **Description:** Grants permission to delete a permission that is associated with a network interface
- **Resource types (\*required):** [network-interface](#list_ec2-resource-network-interface)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Permissions management, Write
- ** [DeletePlacementGroup](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeletePlacementGroup.html) **
- **Description:** Grants permission to delete a placement group
- **Resource types (\*required):** [placement-group\*](#list_ec2-resource-placement-group)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:PlacementGroupName](#list_ec2-ec2_PlacementGroupName)
[ec2:PlacementGroupStrategy](#list_ec2-ec2_PlacementGroupStrategy)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeletePublicIpv4Pool](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeletePublicIpv4Pool.html) **
- **Description:** Grants permission to delete a public IPv4 address pool for public IPv4 CIDRs that you own and brought to Amazon to manage with Amazon VPC IP Address Manager (IPAM)
- **Resource types (\*required):** [ipv4pool-ec2\*](#list_ec2-resource-ipv4pool-ec2)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteQueuedReservedInstances](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteQueuedReservedInstances.html) **
- **Description:** Grants permission to delete the queued purchases for the specified Reserved Instances
- **Resource types (\*required):** [reserved-instances\*](#list_ec2-resource-reserved-instances)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ReservedInstancesOfferingType](#list_ec2-ec2_ReservedInstancesOfferingType)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [DeleteRoute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteRoute.html) **
- **Description:** Grants permission to delete a route from a route table
- **Resource types (\*required):** [route-table\*](#list_ec2-resource-route-table)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RouteTableID](#list_ec2-ec2_RouteTableID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [DeleteRouteServer](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteRouteServer.html) **
- **Description:** Grants permission to delete a route server
- **Resource types (\*required):** [route-server\*](#list_ec2-resource-route-server)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteRouteServerEndpoint](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteRouteServerEndpoint.html) **
- **Description:** Grants permission to delete a route server endpoint
- **Resource types (\*required):** [route-server-endpoint\*](#list_ec2-resource-route-server-endpoint)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteRouteServerPeer](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteRouteServerPeer.html) **
- **Description:** Grants permission to delete a route server peer
- **Resource types (\*required):** [route-server-peer\*](#list_ec2-resource-route-server-peer)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteRouteTable](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteRouteTable.html) **
- **Description:** Grants permission to delete a route table
- **Resource types (\*required):** [route-table\*](#list_ec2-resource-route-table)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RouteTableID](#list_ec2-ec2_RouteTableID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [DeleteSecondaryNetwork](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteSecondaryNetwork.html) **
- **Description:** Grants permission to delete a secondary network
- **Resource types (\*required):** [secondary-network\*](#list_ec2-resource-secondary-network)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteSecondarySubnet](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteSecondarySubnet.html) **
- **Description:** Grants permission to delete a secondary subnet
- **Resource types (\*required):** [secondary-subnet\*](#list_ec2-resource-secondary-subnet)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteSecurityGroup](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteSecurityGroup.html) **
- **Description:** Grants permission to delete a security group
- **Resource types (\*required):** [security-group\*](#list_ec2-resource-security-group)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [DeleteSnapshot](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteSnapshot.html) **
- **Description:** Grants permission to delete a snapshot of an EBS volume
- **Resource types (\*required):** [snapshot\*](#list_ec2-resource-snapshot)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Access level:** Write
- ** [DeleteSpotDatafeedSubscription](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteSpotDatafeedSubscription.html) **
- **Description:** Grants permission to delete a data feed for Spot Instances
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [DeleteSubnet](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteSubnet.html) **
- **Description:** Grants permission to delete a subnet
- **Resource types (\*required):** [subnet\*](#list_ec2-resource-subnet)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [DeleteSubnetCidrReservation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteSubnetCidrReservation.html) **
- **Description:** Grants permission to delete a subnet CIDR reservation
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [DeleteTags](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteTags.html) **
- **Description:** Grants permission to delete one or more tags from Amazon EC2 resources
- **Resource types (\*required):** [capacity-block](#list_ec2-resource-capacity-block) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [capacity-manager-data-export](#list_ec2-resource-capacity-manager-data-export) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [capacity-reservation](#list_ec2-resource-capacity-reservation) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CapacityReservationFleet](#list_ec2-ec2_CapacityReservationFleet)
[ec2:CommitmentDuration](#list_ec2-ec2_CommitmentDuration)
[ec2:CreateDate](#list_ec2-ec2_CreateDate)
[ec2:DestinationCapacityReservationId](#list_ec2-ec2_DestinationCapacityReservationId)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:EndDate](#list_ec2-ec2_EndDate)
[ec2:EndDateType](#list_ec2-ec2_EndDateType)
[ec2:EphemeralStorage](#list_ec2-ec2_EphemeralStorage)
[ec2:InstanceCount](#list_ec2-ec2_InstanceCount)
[ec2:InstanceMatchCriteria](#list_ec2-ec2_InstanceMatchCriteria)
[ec2:InstancePlatform](#list_ec2-ec2_InstancePlatform)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:InterruptibleCapacityReservationId](#list_ec2-ec2_InterruptibleCapacityReservationId)
[ec2:InterruptionType](#list_ec2-ec2_InterruptionType)
[ec2:IsInterruptible](#list_ec2-ec2_IsInterruptible)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SourceCapacityReservationId](#list_ec2-ec2_SourceCapacityReservationId)
[ec2:TargetInstanceCount](#list_ec2-ec2_TargetInstanceCount)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [capacity-reservation-cancellation-quote](#list_ec2-resource-capacity-reservation-cancellation-quote) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [capacity-reservation-fleet](#list_ec2-resource-capacity-reservation-fleet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [carrier-gateway](#list_ec2-resource-carrier-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [client-vpn-endpoint](#list_ec2-resource-client-vpn-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ClientRootCertificateChainArn](#list_ec2-ec2_ClientRootCertificateChainArn)
[ec2:CloudwatchLogGroupArn](#list_ec2-ec2_CloudwatchLogGroupArn)
[ec2:CloudwatchLogStreamArn](#list_ec2-ec2_CloudwatchLogStreamArn)
[ec2:DirectoryArn](#list_ec2-ec2_DirectoryArn)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SamlProviderArn](#list_ec2-ec2_SamlProviderArn)
[ec2:ServerCertificateArn](#list_ec2-ec2_ServerCertificateArn)
- **Resource types (\*required):** [coip-pool](#list_ec2-resource-coip-pool) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [customer-gateway](#list_ec2-resource-customer-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [declarative-policies-report](#list_ec2-resource-declarative-policies-report) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [dedicated-host](#list_ec2-resource-dedicated-host) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AutoPlacement](#list_ec2-ec2_AutoPlacement)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:HostRecovery](#list_ec2-ec2_HostRecovery)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Quantity](#list_ec2-ec2_Quantity)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [dhcp-options](#list_ec2-resource-dhcp-options) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:DhcpOptionsID](#list_ec2-ec2_DhcpOptionsID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [egress-only-internet-gateway](#list_ec2-resource-egress-only-internet-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [elastic-gpu](#list_ec2-resource-elastic-gpu) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:ElasticGpuType](#list_ec2-ec2_ElasticGpuType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [elastic-ip](#list_ec2-resource-elastic-ip) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AllocationId](#list_ec2-ec2_AllocationId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Domain](#list_ec2-ec2_Domain)
[ec2:PublicIpAddress](#list_ec2-ec2_PublicIpAddress)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [export-image-task](#list_ec2-resource-export-image-task) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [export-instance-task](#list_ec2-resource-export-instance-task) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [fleet](#list_ec2-resource-fleet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [fpga-image](#list_ec2-resource-fpga-image) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [host-reservation](#list_ec2-resource-host-reservation) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [image](#list_ec2-resource-image) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Resource types (\*required):** [image-usage-report](#list_ec2-resource-image-usage-report) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [import-image-task](#list_ec2-resource-import-image-task) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [import-snapshot-task](#list_ec2-resource-import-snapshot-task) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [instance](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [instance-connect-endpoint](#list_ec2-resource-instance-connect-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
- **Resource types (\*required):** [instance-event-window](#list_ec2-resource-instance-event-window) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [internet-gateway](#list_ec2-resource-internet-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:InternetGatewayID](#list_ec2-ec2_InternetGatewayID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam](#list_ec2-resource-ipam) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-external-resource-verification-token](#list_ec2-resource-ipam-external-resource-verification-token) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-policy](#list_ec2-resource-ipam-policy) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-pool](#list_ec2-resource-ipam-pool) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-pool-allocation](#list_ec2-resource-ipam-pool-allocation) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-prefix-list-resolver](#list_ec2-resource-ipam-prefix-list-resolver) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-prefix-list-resolver-target](#list_ec2-resource-ipam-prefix-list-resolver-target) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-resource-discovery](#list_ec2-resource-ipam-resource-discovery) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-resource-discovery-association](#list_ec2-resource-ipam-resource-discovery-association) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-scope](#list_ec2-resource-ipam-scope) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipv4pool-ec2](#list_ec2-resource-ipv4pool-ec2) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipv6pool-ec2](#list_ec2-resource-ipv6pool-ec2) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [key-pair](#list_ec2-resource-key-pair) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KeyPairName](#list_ec2-ec2_KeyPairName)
[ec2:KeyPairType](#list_ec2-ec2_KeyPairType)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [launch-template](#list_ec2-resource-launch-template) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [local-gateway](#list_ec2-resource-local-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [local-gateway-route-table](#list_ec2-resource-local-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [local-gateway-route-table-virtual-interface-group-association](#list_ec2-resource-local-gateway-route-table-virtual-interface-group-association) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [local-gateway-route-table-vpc-association](#list_ec2-resource-local-gateway-route-table-vpc-association) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [local-gateway-virtual-interface](#list_ec2-resource-local-gateway-virtual-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [local-gateway-virtual-interface-group](#list_ec2-resource-local-gateway-virtual-interface-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [natgateway](#list_ec2-resource-natgateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [network-acl](#list_ec2-resource-network-acl) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:NetworkAclID](#list_ec2-ec2_NetworkAclID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [network-insights-access-scope](#list_ec2-resource-network-insights-access-scope) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [network-insights-access-scope-analysis](#list_ec2-resource-network-insights-access-scope-analysis) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [network-insights-analysis](#list_ec2-resource-network-insights-analysis) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [network-insights-path](#list_ec2-resource-network-insights-path) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [network-interface](#list_ec2-resource-network-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [placement-group](#list_ec2-resource-placement-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:PlacementGroupName](#list_ec2-ec2_PlacementGroupName)
[ec2:PlacementGroupStrategy](#list_ec2-ec2_PlacementGroupStrategy)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [prefix-list](#list_ec2-resource-prefix-list) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IpamPrefixListResolverTargetId](#list_ec2-ec2_IpamPrefixListResolverTargetId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [replace-root-volume-task](#list_ec2-resource-replace-root-volume-task) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [reserved-instances](#list_ec2-resource-reserved-instances) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ReservedInstancesOfferingType](#list_ec2-ec2_ReservedInstancesOfferingType)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [route-server](#list_ec2-resource-route-server) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [route-server-endpoint](#list_ec2-resource-route-server-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [route-server-peer](#list_ec2-resource-route-server-peer) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [route-table](#list_ec2-resource-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RouteTableID](#list_ec2-ec2_RouteTableID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [secondary-interface](#list_ec2-resource-secondary-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [secondary-network](#list_ec2-resource-secondary-network) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [secondary-subnet](#list_ec2-resource-secondary-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [security-group](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [security-group-rule](#list_ec2-resource-security-group-rule) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [snapshot](#list_ec2-resource-snapshot) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Resource types (\*required):** [spot-fleet-request](#list_ec2-resource-spot-fleet-request) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [spot-instances-request](#list_ec2-resource-spot-instances-request) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [subnet-cidr-reservation](#list_ec2-resource-subnet-cidr-reservation) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [traffic-mirror-filter](#list_ec2-resource-traffic-mirror-filter) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [traffic-mirror-filter-rule](#list_ec2-resource-traffic-mirror-filter-rule) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [traffic-mirror-session](#list_ec2-resource-traffic-mirror-session) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [traffic-mirror-target](#list_ec2-resource-traffic-mirror-target) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [transit-gateway](#list_ec2-resource-transit-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayId](#list_ec2-ec2_transitGatewayId)
- **Resource types (\*required):** [transit-gateway-attachment](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [transit-gateway-connect-peer](#list_ec2-resource-transit-gateway-connect-peer) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayConnectPeerId](#list_ec2-ec2_transitGatewayConnectPeerId)
- **Resource types (\*required):** [transit-gateway-metering-policy](#list_ec2-resource-transit-gateway-metering-policy) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMeteringPolicyId](#list_ec2-ec2_transitGatewayMeteringPolicyId)
- **Resource types (\*required):** [transit-gateway-multicast-domain](#list_ec2-resource-transit-gateway-multicast-domain) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMulticastDomainId](#list_ec2-ec2_transitGatewayMulticastDomainId)
- **Resource types (\*required):** [transit-gateway-policy-table](#list_ec2-resource-transit-gateway-policy-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayPolicyTableId](#list_ec2-ec2_transitGatewayPolicyTableId)
- **Resource types (\*required):** [transit-gateway-route-table](#list_ec2-resource-transit-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableId](#list_ec2-ec2_transitGatewayRouteTableId)
- **Resource types (\*required):** [transit-gateway-route-table-announcement](#list_ec2-resource-transit-gateway-route-table-announcement) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableAnnouncementId](#list_ec2-ec2_transitGatewayRouteTableAnnouncementId)
- **Resource types (\*required):** [verified-access-endpoint](#list_ec2-resource-verified-access-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [verified-access-endpoint-target](#list_ec2-resource-verified-access-endpoint-target) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [verified-access-group](#list_ec2-resource-verified-access-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [verified-access-instance](#list_ec2-resource-verified-access-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [verified-access-policy](#list_ec2-resource-verified-access-policy) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [verified-access-trust-provider](#list_ec2-resource-verified-access-trust-provider) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [volume](#list_ec2-resource-volume) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType)
- **Resource types (\*required):** [vpc](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Resource types (\*required):** [vpc-block-public-access-exclusion](#list_ec2-resource-vpc-block-public-access-exclusion) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpc-encryption-control](#list_ec2-resource-vpc-encryption-control) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpc-endpoint](#list_ec2-resource-vpc-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpcePrivateDnsPreference](#list_ec2-ec2_VpcePrivateDnsPreference)
[ec2:VpcePrivateDnsSpecifiedDomains](#list_ec2-ec2_VpcePrivateDnsSpecifiedDomains)
[ec2:VpceServiceName](#list_ec2-ec2_VpceServiceName)
[ec2:VpceServiceOwner](#list_ec2-ec2_VpceServiceOwner)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
- **Resource types (\*required):** [vpc-endpoint-connection](#list_ec2-resource-vpc-endpoint-connection) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpc-endpoint-service](#list_ec2-resource-vpc-endpoint-service) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpceServicePrivateDnsName](#list_ec2-ec2_VpceServicePrivateDnsName)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
[ec2:VpceSupportedRegion](#list_ec2-ec2_VpceSupportedRegion)
- **Resource types (\*required):** [vpc-endpoint-service-permission](#list_ec2-resource-vpc-endpoint-service-permission) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpc-flow-log](#list_ec2-resource-vpc-flow-log) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpc-peering-connection](#list_ec2-resource-vpc-peering-connection) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AccepterVpc](#list_ec2-ec2_AccepterVpc)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RequesterVpc](#list_ec2-ec2_RequesterVpc)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpcPeeringConnectionID](#list_ec2-ec2_VpcPeeringConnectionID)
- **Resource types (\*required):** [vpn-concentrator](#list_ec2-resource-vpn-concentrator) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpn-connection](#list_ec2-resource-vpn-connection) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthenticationType](#list_ec2-ec2_AuthenticationType)
[ec2:DPDTimeoutSeconds](#list_ec2-ec2_DPDTimeoutSeconds)
[ec2:GatewayType](#list_ec2-ec2_GatewayType)
[ec2:IKEVersions](#list_ec2-ec2_IKEVersions)
[ec2:InsideTunnelCidr](#list_ec2-ec2_InsideTunnelCidr)
[ec2:InsideTunnelIpv6Cidr](#list_ec2-ec2_InsideTunnelIpv6Cidr)
[ec2:Phase1DHGroup](#list_ec2-ec2_Phase1DHGroup)
[ec2:Phase1EncryptionAlgorithms](#list_ec2-ec2_Phase1EncryptionAlgorithms)
[ec2:Phase1IntegrityAlgorithms](#list_ec2-ec2_Phase1IntegrityAlgorithms)
[ec2:Phase1LifetimeSeconds](#list_ec2-ec2_Phase1LifetimeSeconds)
[ec2:Phase2DHGroup](#list_ec2-ec2_Phase2DHGroup)
[ec2:Phase2EncryptionAlgorithms](#list_ec2-ec2_Phase2EncryptionAlgorithms)
[ec2:Phase2IntegrityAlgorithms](#list_ec2-ec2_Phase2IntegrityAlgorithms)
[ec2:Phase2LifetimeSeconds](#list_ec2-ec2_Phase2LifetimeSeconds)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RekeyFuzzPercentage](#list_ec2-ec2_RekeyFuzzPercentage)
[ec2:RekeyMarginTimeSeconds](#list_ec2-ec2_RekeyMarginTimeSeconds)
[ec2:ReplayWindowSizePackets](#list_ec2-ec2_ReplayWindowSizePackets)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RoutingType](#list_ec2-ec2_RoutingType)
- **Resource types (\*required):** [vpn-gateway](#list_ec2-resource-vpn-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Tagging, Write
- ** [DeleteTrafficMirrorFilter](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteTrafficMirrorFilter.html) **
- **Description:** Grants permission to delete a traffic mirror filter
- **Resource types (\*required):** [traffic-mirror-filter\*](#list_ec2-resource-traffic-mirror-filter)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteTrafficMirrorFilterRule](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteTrafficMirrorFilterRule.html) **
- **Description:** Grants permission to delete a traffic mirror filter rule
- **Resource types (\*required):** [traffic-mirror-filter\*](#list_ec2-resource-traffic-mirror-filter) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [traffic-mirror-filter-rule\*](#list_ec2-resource-traffic-mirror-filter-rule) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteTrafficMirrorSession](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteTrafficMirrorSession.html) **
- **Description:** Grants permission to delete a traffic mirror session
- **Resource types (\*required):** [traffic-mirror-session\*](#list_ec2-resource-traffic-mirror-session)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteTrafficMirrorTarget](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteTrafficMirrorTarget.html) **
- **Description:** Grants permission to delete a traffic mirror target
- **Resource types (\*required):** [traffic-mirror-target\*](#list_ec2-resource-traffic-mirror-target)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteTransitGateway](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteTransitGateway.html) **
- **Description:** Grants permission to delete a transit gateway
- **Resource types (\*required):** [transit-gateway\*](#list_ec2-resource-transit-gateway)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayId](#list_ec2-ec2_transitGatewayId)
- **Access level:** Write
- ** [DeleteTransitGatewayClientVpnAttachment](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteTransitGatewayClientVpnAttachment.html) **
- **Description:** Grants permission to delete a transit gateway attachment for a Client VPN endpoint
- **Resource types (\*required):** [transit-gateway-attachment\*](#list_ec2-resource-transit-gateway-attachment)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Access level:** Write
- ** [DeleteTransitGatewayConnect](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteTransitGatewayConnect.html) **
- **Description:** Grants permission to delete a transit gateway connect attachment
- **Resource types (\*required):** [transit-gateway-attachment\*](#list_ec2-resource-transit-gateway-attachment)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Access level:** Write
- ** [DeleteTransitGatewayConnectPeer](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteTransitGatewayConnectPeer.html) **
- **Description:** Grants permission to delete a transit gateway connect peer
- **Resource types (\*required):** [transit-gateway-connect-peer\*](#list_ec2-resource-transit-gateway-connect-peer)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayConnectPeerId](#list_ec2-ec2_transitGatewayConnectPeerId)
- **Access level:** Write
- ** [DeleteTransitGatewayMeteringPolicy](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteTransitGatewayMeteringPolicy.html) **
- **Description:** Grants permission to delete a transit gateway metering policy
- **Resource types (\*required):** [transit-gateway-metering-policy\*](#list_ec2-resource-transit-gateway-metering-policy)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMeteringPolicyId](#list_ec2-ec2_transitGatewayMeteringPolicyId)
- **Access level:** Write
- ** [DeleteTransitGatewayMeteringPolicyEntry](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteTransitGatewayMeteringPolicyEntry.html) **
- **Description:** Grants permission to delete an entry from a transit gateway metering policy
- **Resource types (\*required):** [transit-gateway-metering-policy\*](#list_ec2-resource-transit-gateway-metering-policy)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMeteringPolicyId](#list_ec2-ec2_transitGatewayMeteringPolicyId)
- **Access level:** Write
- ** [DeleteTransitGatewayMulticastDomain](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteTransitGatewayMulticastDomain.html) **
- **Description:** Grants permission to delete a transit gateway multicast domain
- **Resource types (\*required):** [transit-gateway-multicast-domain\*](#list_ec2-resource-transit-gateway-multicast-domain)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMulticastDomainId](#list_ec2-ec2_transitGatewayMulticastDomainId)
- **Access level:** Write
- ** [DeleteTransitGatewayPeeringAttachment](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteTransitGatewayPeeringAttachment.html) **
- **Description:** Grants permission to delete a peering attachment from a transit gateway
- **Resource types (\*required):** [transit-gateway-attachment\*](#list_ec2-resource-transit-gateway-attachment)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Access level:** Write
- ** [DeleteTransitGatewayPolicyTable](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteTransitGatewayPolicyTable.html) **
- **Description:** Grants permission to delete a transit gateway policy table
- **Resource types (\*required):** [transit-gateway-policy-table\*](#list_ec2-resource-transit-gateway-policy-table)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayPolicyTableId](#list_ec2-ec2_transitGatewayPolicyTableId)
- **Access level:** Write
- ** [DeleteTransitGatewayPrefixListReference](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteTransitGatewayPrefixListReference.html) **
- **Description:** Grants permission to delete a transit gateway prefix list reference
- **Resource types (\*required):** [prefix-list\*](#list_ec2-resource-prefix-list) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IpamPrefixListResolverTargetId](#list_ec2-ec2_IpamPrefixListResolverTargetId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [transit-gateway-route-table\*](#list_ec2-resource-transit-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableId](#list_ec2-ec2_transitGatewayRouteTableId)
- **Access level:** Write
- ** [DeleteTransitGatewayRoute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteTransitGatewayRoute.html) **
- **Description:** Grants permission to delete a route from a transit gateway route table
- **Resource types (\*required):** [transit-gateway-route-table\*](#list_ec2-resource-transit-gateway-route-table)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableId](#list_ec2-ec2_transitGatewayRouteTableId)
- **Access level:** Write
- ** [DeleteTransitGatewayRouteTable](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteTransitGatewayRouteTable.html) **
- **Description:** Grants permission to delete a transit gateway route table
- **Resource types (\*required):** [transit-gateway-route-table\*](#list_ec2-resource-transit-gateway-route-table)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableId](#list_ec2-ec2_transitGatewayRouteTableId)
- **Access level:** Write
- ** [DeleteTransitGatewayRouteTableAnnouncement](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteTransitGatewayRouteTableAnnouncement.html) **
- **Description:** Grants permission to delete a transit gateway route table announcement
- **Resource types (\*required):** [transit-gateway-route-table-announcement\*](#list_ec2-resource-transit-gateway-route-table-announcement)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableAnnouncementId](#list_ec2-ec2_transitGatewayRouteTableAnnouncementId)
- **Access level:** Write
- ** [DeleteTransitGatewayVpcAttachment](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteTransitGatewayVpcAttachment.html) **
- **Description:** Grants permission to delete a VPC attachment from a transit gateway
- **Resource types (\*required):** [transit-gateway-attachment\*](#list_ec2-resource-transit-gateway-attachment)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Access level:** Write
- ** [DeleteVerifiedAccessEndpoint](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteVerifiedAccessEndpoint.html) **
- **Description:** Grants permission to delete a Verified Access endpoint
- **Resource types (\*required):** [verified-access-endpoint\*](#list_ec2-resource-verified-access-endpoint)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteVerifiedAccessGroup](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteVerifiedAccessGroup.html) **
- **Description:** Grants permission to delete a Verified Access group
- **Resource types (\*required):** [verified-access-group\*](#list_ec2-resource-verified-access-group)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteVerifiedAccessInstance](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteVerifiedAccessInstance.html) **
- **Description:** Grants permission to delete a Verified Access instance
- **Resource types (\*required):** [verified-access-instance\*](#list_ec2-resource-verified-access-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteVerifiedAccessTrustProvider](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteVerifiedAccessTrustProvider.html) **
- **Description:** Grants permission to delete a verified trust provider
- **Resource types (\*required):** [verified-access-trust-provider\*](#list_ec2-resource-verified-access-trust-provider)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteVolume](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteVolume.html) **
- **Description:** Grants permission to delete an EBS volume
- **Resource types (\*required):** [volume\*](#list_ec2-resource-volume)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType)
- **Access level:** Write
- ** [DeleteVpc](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteVpc.html) **
- **Description:** Grants permission to delete a VPC
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [DeleteVpcBlockPublicAccessExclusion](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteVpcBlockPublicAccessExclusion.html) **
- **Description:** Grants permission to delete an exclusion list for blocked public access on a VPC
- **Resource types (\*required):** [vpc-block-public-access-exclusion\*](#list_ec2-resource-vpc-block-public-access-exclusion)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteVpcEncryptionControl](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteVpcEncryptionControl.html) **
- **Description:** Grants permission to delete a VPC Encryption Control
- **Resource types (\*required):** [vpc-encryption-control\*](#list_ec2-resource-vpc-encryption-control)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteVpcEndpointConnectionNotifications](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteVpcEndpointConnectionNotifications.html) **
- **Description:** Grants permission to delete one or more VPC endpoint connection notifications
- **Resource types (\*required):** [vpc-endpoint](#list_ec2-resource-vpc-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpcePrivateDnsPreference](#list_ec2-ec2_VpcePrivateDnsPreference)
[ec2:VpcePrivateDnsSpecifiedDomains](#list_ec2-ec2_VpcePrivateDnsSpecifiedDomains)
[ec2:VpceServiceName](#list_ec2-ec2_VpceServiceName)
[ec2:VpceServiceOwner](#list_ec2-ec2_VpceServiceOwner)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
- **Resource types (\*required):** [vpc-endpoint-service](#list_ec2-resource-vpc-endpoint-service) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpceServicePrivateDnsName](#list_ec2-ec2_VpceServicePrivateDnsName)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
[ec2:VpceSupportedRegion](#list_ec2-ec2_VpceSupportedRegion)
- **Access level:** Write
- ** [DeleteVpcEndpointServiceConfigurations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteVpcEndpointServiceConfigurations.html) **
- **Description:** Grants permission to delete one or more VPC endpoint service configurations
- **Resource types (\*required):** [vpc-endpoint-service\*](#list_ec2-resource-vpc-endpoint-service)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpceServicePrivateDnsName](#list_ec2-ec2_VpceServicePrivateDnsName)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
[ec2:VpceSupportedRegion](#list_ec2-ec2_VpceSupportedRegion)
- **Access level:** Write
- ** [DeleteVpcEndpoints](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteVpcEndpoints.html) **
- **Description:** Grants permission to delete one or more VPC endpoints
- **Resource types (\*required):** [vpc-endpoint\*](#list_ec2-resource-vpc-endpoint)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpcePrivateDnsPreference](#list_ec2-ec2_VpcePrivateDnsPreference)
[ec2:VpcePrivateDnsSpecifiedDomains](#list_ec2-ec2_VpcePrivateDnsSpecifiedDomains)
[ec2:VpceServiceName](#list_ec2-ec2_VpceServiceName)
[ec2:VpceServiceOwner](#list_ec2-ec2_VpceServiceOwner)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
- **Access level:** Write
- ** [DeleteVpcPeeringConnection](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteVpcPeeringConnection.html) **
- **Description:** Grants permission to delete a VPC peering connection
- **Resource types (\*required):** [vpc-peering-connection\*](#list_ec2-resource-vpc-peering-connection)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AccepterVpc](#list_ec2-ec2_AccepterVpc)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RequesterVpc](#list_ec2-ec2_RequesterVpc)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpcPeeringConnectionID](#list_ec2-ec2_VpcPeeringConnectionID)
- **Access level:** Write
- ** [DeleteVpnConcentrator](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteVpnConcentrator.html) **
- **Description:** Grants permission to delete a VPN concentrator
- **Resource types (\*required):** [vpn-concentrator\*](#list_ec2-resource-vpn-concentrator)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeleteVpnConnection](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteVpnConnection.html) **
- **Description:** Grants permission to delete a VPN connection
- **Resource types (\*required):** [vpn-connection\*](#list_ec2-resource-vpn-connection)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthenticationType](#list_ec2-ec2_AuthenticationType)
[ec2:DPDTimeoutSeconds](#list_ec2-ec2_DPDTimeoutSeconds)
[ec2:GatewayType](#list_ec2-ec2_GatewayType)
[ec2:IKEVersions](#list_ec2-ec2_IKEVersions)
[ec2:InsideTunnelCidr](#list_ec2-ec2_InsideTunnelCidr)
[ec2:InsideTunnelIpv6Cidr](#list_ec2-ec2_InsideTunnelIpv6Cidr)
[ec2:Phase1DHGroup](#list_ec2-ec2_Phase1DHGroup)
[ec2:Phase1EncryptionAlgorithms](#list_ec2-ec2_Phase1EncryptionAlgorithms)
[ec2:Phase1IntegrityAlgorithms](#list_ec2-ec2_Phase1IntegrityAlgorithms)
[ec2:Phase1LifetimeSeconds](#list_ec2-ec2_Phase1LifetimeSeconds)
[ec2:Phase2DHGroup](#list_ec2-ec2_Phase2DHGroup)
[ec2:Phase2EncryptionAlgorithms](#list_ec2-ec2_Phase2EncryptionAlgorithms)
[ec2:Phase2IntegrityAlgorithms](#list_ec2-ec2_Phase2IntegrityAlgorithms)
[ec2:Phase2LifetimeSeconds](#list_ec2-ec2_Phase2LifetimeSeconds)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RekeyFuzzPercentage](#list_ec2-ec2_RekeyFuzzPercentage)
[ec2:RekeyMarginTimeSeconds](#list_ec2-ec2_RekeyMarginTimeSeconds)
[ec2:ReplayWindowSizePackets](#list_ec2-ec2_ReplayWindowSizePackets)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RoutingType](#list_ec2-ec2_RoutingType)
- **Access level:** Write
- ** [DeleteVpnConnectionRoute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteVpnConnectionRoute.html) **
- **Description:** Grants permission to delete a static route for a VPN connection between a virtual private gateway and a customer gateway
- **Resource types (\*required):** [vpn-connection\*](#list_ec2-resource-vpn-connection)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthenticationType](#list_ec2-ec2_AuthenticationType)
[ec2:DPDTimeoutSeconds](#list_ec2-ec2_DPDTimeoutSeconds)
[ec2:GatewayType](#list_ec2-ec2_GatewayType)
[ec2:IKEVersions](#list_ec2-ec2_IKEVersions)
[ec2:InsideTunnelCidr](#list_ec2-ec2_InsideTunnelCidr)
[ec2:InsideTunnelIpv6Cidr](#list_ec2-ec2_InsideTunnelIpv6Cidr)
[ec2:Phase1DHGroup](#list_ec2-ec2_Phase1DHGroup)
[ec2:Phase1EncryptionAlgorithms](#list_ec2-ec2_Phase1EncryptionAlgorithms)
[ec2:Phase1IntegrityAlgorithms](#list_ec2-ec2_Phase1IntegrityAlgorithms)
[ec2:Phase1LifetimeSeconds](#list_ec2-ec2_Phase1LifetimeSeconds)
[ec2:Phase2DHGroup](#list_ec2-ec2_Phase2DHGroup)
[ec2:Phase2EncryptionAlgorithms](#list_ec2-ec2_Phase2EncryptionAlgorithms)
[ec2:Phase2IntegrityAlgorithms](#list_ec2-ec2_Phase2IntegrityAlgorithms)
[ec2:Phase2LifetimeSeconds](#list_ec2-ec2_Phase2LifetimeSeconds)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RekeyFuzzPercentage](#list_ec2-ec2_RekeyFuzzPercentage)
[ec2:RekeyMarginTimeSeconds](#list_ec2-ec2_RekeyMarginTimeSeconds)
[ec2:ReplayWindowSizePackets](#list_ec2-ec2_ReplayWindowSizePackets)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RoutingType](#list_ec2-ec2_RoutingType)
- **Access level:** Write
- ** [DeleteVpnGateway](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteVpnGateway.html) **
- **Description:** Grants permission to delete a virtual private gateway
- **Resource types (\*required):** [vpn-gateway\*](#list_ec2-resource-vpn-gateway)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeprovisionByoipCidr](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeprovisionByoipCidr.html) **
- **Description:** Grants permission to release an IP address range that was provisioned through bring your own IP addresses (BYOIP), and to delete the corresponding address pool
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [DeprovisionIpamByoasn](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeprovisionIpamByoasn.html) **
- **Description:** Grants permission to deprovision an Autonomous System Number (ASN) from an Amazon Web Services account
- **Resource types (\*required):** [ipam\*](#list_ec2-resource-ipam)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeprovisionIpamPoolCidr](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeprovisionIpamPoolCidr.html) **
- **Description:** Grants permission to deprovision a CIDR provisioned from an Amazon VPC IP Address Manager (IPAM) pool
- **Resource types (\*required):** [ipam-pool\*](#list_ec2-resource-ipam-pool)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeprovisionPublicIpv4PoolCidr](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeprovisionPublicIpv4PoolCidr.html) **
- **Description:** Grants permission to deprovision a CIDR from a public IPv4 pool
- **Resource types (\*required):** [ipv4pool-ec2\*](#list_ec2-resource-ipv4pool-ec2)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DeregisterImage](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeregisterImage.html) **
- **Description:** Grants permission to deregister an Amazon Machine Image (AMI)
- **Resource types (\*required):** [image\*](#list_ec2-resource-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Access level:** Write
- ** [DeregisterInstanceEventNotificationAttributes](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeregisterInstanceEventNotificationAttributes.html) **
- **Description:** Grants permission to remove tags from the set of tags to include in notifications about scheduled events for your instances
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [DeregisterTransitGatewayMulticastGroupMembers](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeregisterTransitGatewayMulticastGroupMembers.html) **
- **Description:** Grants permission to deregister one or more network interface members from a group IP address in a transit gateway multicast domain
- **Resource types (\*required):** [network-interface](#list_ec2-resource-network-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [transit-gateway-multicast-domain](#list_ec2-resource-transit-gateway-multicast-domain) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMulticastDomainId](#list_ec2-ec2_transitGatewayMulticastDomainId)
- **Access level:** Write
- ** [DeregisterTransitGatewayMulticastGroupSources](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeregisterTransitGatewayMulticastGroupSources.html) **
- **Description:** Grants permission to deregister one or more network interface sources from a group IP address in a transit gateway multicast domain
- **Resource types (\*required):** [network-interface](#list_ec2-resource-network-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [transit-gateway-multicast-domain](#list_ec2-resource-transit-gateway-multicast-domain) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMulticastDomainId](#list_ec2-ec2_transitGatewayMulticastDomainId)
- **Access level:** Write
- ** [DescribeAccountAttributes](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeAccountAttributes.html) **
- **Description:** Grants permission to describe the attributes of the Amazon Web Services account
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeAddressTransfers](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeAddressTransfers.html) **
- **Description:** Grants permission to describe an Elastic IP address transfer
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeAddresses](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeAddresses.html) **
- **Description:** Grants permission to describe one or more Elastic IP addresses
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeAddressesAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeAddressesAttribute.html) **
- **Description:** Grants permission to describe the attributes of the specified Elastic IP addresses
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeAggregateIdFormat](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeAggregateIdFormat.html) **
- **Description:** Grants permission to describe the longer ID format settings for all resource types
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeAvailabilityZones](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeAvailabilityZones.html) **
- **Description:** Grants permission to describe one or more of the Availability Zones that are available to you
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeAwsNetworkPerformanceMetricSubscriptions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeAwsNetworkPerformanceMetricSubscriptions.html) **
- **Description:** Grants permission to describe the current infrastructure performance metric subscriptions
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeBundleTasks](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeBundleTasks.html) **
- **Description:** Grants permission to describe one or more bundling tasks
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeByoipCidrs](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeByoipCidrs.html) **
- **Description:** Grants permission to describe the IP address ranges that were provisioned through bring your own IP addresses (BYOIP)
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeCapacityBlockExtensionHistory](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeCapacityBlockExtensionHistory.html) **
- **Description:** Grants permission to describe Capacity Block extensions history
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeCapacityBlockExtensionOfferings](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeCapacityBlockExtensionOfferings.html) **
- **Description:** Grants permission to describe Capacity Block extensions offerings
- **Resource types (\*required):** [capacity-reservation\*](#list_ec2-resource-capacity-reservation)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CapacityReservationFleet](#list_ec2-ec2_CapacityReservationFleet)
[ec2:CommitmentDuration](#list_ec2-ec2_CommitmentDuration)
[ec2:CreateDate](#list_ec2-ec2_CreateDate)
[ec2:DestinationCapacityReservationId](#list_ec2-ec2_DestinationCapacityReservationId)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:EndDate](#list_ec2-ec2_EndDate)
[ec2:EndDateType](#list_ec2-ec2_EndDateType)
[ec2:EphemeralStorage](#list_ec2-ec2_EphemeralStorage)
[ec2:InstanceCount](#list_ec2-ec2_InstanceCount)
[ec2:InstanceMatchCriteria](#list_ec2-ec2_InstanceMatchCriteria)
[ec2:InstancePlatform](#list_ec2-ec2_InstancePlatform)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:InterruptibleCapacityReservationId](#list_ec2-ec2_InterruptibleCapacityReservationId)
[ec2:InterruptionType](#list_ec2-ec2_InterruptionType)
[ec2:IsInterruptible](#list_ec2-ec2_IsInterruptible)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SourceCapacityReservationId](#list_ec2-ec2_SourceCapacityReservationId)
[ec2:TargetInstanceCount](#list_ec2-ec2_TargetInstanceCount)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** List
- ** [DescribeCapacityBlockOfferings](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeCapacityBlockOfferings.html) **
- **Description:** Grants permission to describe Capacity Block offerings available for purchase
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeCapacityBlockStatus](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeCapacityBlockStatus.html) **
- **Description:** Grants permission to describe the availability of capacity for the specified Capacity blocks, or all of your Capacity Blocks
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeCapacityBlocks](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeCapacityBlocks.html) **
- **Description:** Grants permission to describe details about Capacity Blocks in the Amazon Web Services Region that you're currently using
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeCapacityManagerDataExports](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeCapacityManagerDataExports.html) **
- **Description:** Grants permission to describe one or more Capacity Manager data export configurations
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeCapacityReservationBillingRequests](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeCapacityReservationBillingRequests.html) **
- **Description:** Grants permission to describe one or more requests to assign the billing of the unused capacity of a Capacity Reservation
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeCapacityReservationCancellationQuotes](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeCapacityReservationCancellationQuotes.html) **
- **Description:** Grants permission to describe one or more Capacity Reservation cancellation quotes
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeCapacityReservationFleets](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeCapacityReservationFleets.html) **
- **Description:** Grants permission to describe one or more Capacity Reservation Fleets
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeCapacityReservationTopology](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeCapacityReservationTopology.html) **
- **Description:** Grants permission to describe the topology of one or more Capacity Reservations
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeCapacityReservations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeCapacityReservations.html) **
- **Description:** Grants permission to describe one or more Capacity Reservations
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeCarrierGateways](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeCarrierGateways.html) **
- **Description:** Grants permission to describe one or more Carrier Gateways
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeClassicLinkInstances](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeClassicLinkInstances.html) **
- **Description:** Grants permission to describe one or more linked EC2-Classic instances
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeClientVpnAuthorizationRules](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeClientVpnAuthorizationRules.html) **
- **Description:** Grants permission to describe the authorization rules for a Client VPN endpoint
- **Resource types (\*required):** [client-vpn-endpoint\*](#list_ec2-resource-client-vpn-endpoint)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ClientRootCertificateChainArn](#list_ec2-ec2_ClientRootCertificateChainArn)
[ec2:CloudwatchLogGroupArn](#list_ec2-ec2_CloudwatchLogGroupArn)
[ec2:CloudwatchLogStreamArn](#list_ec2-ec2_CloudwatchLogStreamArn)
[ec2:DirectoryArn](#list_ec2-ec2_DirectoryArn)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SamlProviderArn](#list_ec2-ec2_SamlProviderArn)
[ec2:ServerCertificateArn](#list_ec2-ec2_ServerCertificateArn)
- **Access level:** List
- ** [DescribeClientVpnConnections](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeClientVpnConnections.html) **
- **Description:** Grants permission to describe active client connections and connections that have been terminated within the last 60 minutes for a Client VPN endpoint
- **Resource types (\*required):** [client-vpn-endpoint\*](#list_ec2-resource-client-vpn-endpoint)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ClientRootCertificateChainArn](#list_ec2-ec2_ClientRootCertificateChainArn)
[ec2:CloudwatchLogGroupArn](#list_ec2-ec2_CloudwatchLogGroupArn)
[ec2:CloudwatchLogStreamArn](#list_ec2-ec2_CloudwatchLogStreamArn)
[ec2:DirectoryArn](#list_ec2-ec2_DirectoryArn)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SamlProviderArn](#list_ec2-ec2_SamlProviderArn)
[ec2:ServerCertificateArn](#list_ec2-ec2_ServerCertificateArn)
- **Access level:** List
- ** [DescribeClientVpnEndpoints](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeClientVpnEndpoints.html) **
- **Description:** Grants permission to describe one or more Client VPN endpoints
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeClientVpnRoutes](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeClientVpnRoutes.html) **
- **Description:** Grants permission to describe the routes for a Client VPN endpoint
- **Resource types (\*required):** [client-vpn-endpoint\*](#list_ec2-resource-client-vpn-endpoint)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ClientRootCertificateChainArn](#list_ec2-ec2_ClientRootCertificateChainArn)
[ec2:CloudwatchLogGroupArn](#list_ec2-ec2_CloudwatchLogGroupArn)
[ec2:CloudwatchLogStreamArn](#list_ec2-ec2_CloudwatchLogStreamArn)
[ec2:DirectoryArn](#list_ec2-ec2_DirectoryArn)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SamlProviderArn](#list_ec2-ec2_SamlProviderArn)
[ec2:ServerCertificateArn](#list_ec2-ec2_ServerCertificateArn)
- **Access level:** List
- ** [DescribeClientVpnTargetNetworks](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeClientVpnTargetNetworks.html) **
- **Description:** Grants permission to describe the target networks that are associated with a Client VPN endpoint
- **Resource types (\*required):** [client-vpn-endpoint\*](#list_ec2-resource-client-vpn-endpoint)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ClientRootCertificateChainArn](#list_ec2-ec2_ClientRootCertificateChainArn)
[ec2:CloudwatchLogGroupArn](#list_ec2-ec2_CloudwatchLogGroupArn)
[ec2:CloudwatchLogStreamArn](#list_ec2-ec2_CloudwatchLogStreamArn)
[ec2:DirectoryArn](#list_ec2-ec2_DirectoryArn)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SamlProviderArn](#list_ec2-ec2_SamlProviderArn)
[ec2:ServerCertificateArn](#list_ec2-ec2_ServerCertificateArn)
- **Access level:** List
- ** [DescribeCoipPools](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeCoipPools.html) **
- **Description:** Grants permission to describe the specified customer-owned address pools or all of your customer-owned address pools
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeConversionTasks](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeConversionTasks.html) **
- **Description:** Grants permission to describe one or more conversion tasks
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeCustomerGateways](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeCustomerGateways.html) **
- **Description:** Grants permission to describe one or more customer gateways
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeDeclarativePoliciesReports](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeDeclarativePoliciesReports.html) **
- **Description:** Grants permission to describe one or more declarative policies reports
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeDhcpOptions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeDhcpOptions.html) **
- **Description:** Grants permission to describe one or more DHCP options sets
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeEgressOnlyInternetGateways](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeEgressOnlyInternetGateways.html) **
- **Description:** Grants permission to describe one or more egress-only internet gateways
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeElasticGpus](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeElasticGpus.html) **
- **Description:** Grants permission to describe an Elastic Graphics accelerator that is associated with an instance
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeExportImageTasks](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeExportImageTasks.html) **
- **Description:** Grants permission to describe one or more export image tasks
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeExportTasks](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeExportTasks.html) **
- **Description:** Grants permission to describe one or more export instance tasks
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeFastLaunchImages](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeFastLaunchImages.html) **
- **Description:** Grants permission to describe fast-launch enabled Windows AMIs
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeFastSnapshotRestores](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeFastSnapshotRestores.html) **
- **Description:** Grants permission to describe the state of fast snapshot restores for snapshots
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeFleetHistory](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeFleetHistory.html) **
- **Description:** Grants permission to describe the events for an EC2 Fleet during a specified time
- **Resource types (\*required):** [fleet\*](#list_ec2-resource-fleet)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** List
- ** [DescribeFleetInstances](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeFleetInstances.html) **
- **Description:** Grants permission to describe the running instances for an EC2 Fleet
- **Resource types (\*required):** [fleet\*](#list_ec2-resource-fleet)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** List
- ** [DescribeFleets](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeFleets.html) **
- **Description:** Grants permission to describe one or more EC2 Fleets
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeFlowLogs](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeFlowLogs.html) **
- **Description:** Grants permission to describe one or more flow logs
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeFpgaImageAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeFpgaImageAttribute.html) **
- **Description:** Grants permission to describe the attributes of an Amazon FPGA Image (AFI)
- **Resource types (\*required):** [fpga-image\*](#list_ec2-resource-fpga-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** List
- ** [DescribeFpgaImages](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeFpgaImages.html) **
- **Description:** Grants permission to describe one or more Amazon FPGA Images (AFIs)
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeHostReservationOfferings](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeHostReservationOfferings.html) **
- **Description:** Grants permission to describe the Dedicated Host Reservations that are available to purchase
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeHostReservations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeHostReservations.html) **
- **Description:** Grants permission to describe the Dedicated Host Reservations that are associated with Dedicated Hosts in the Amazon Web Services account
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeHosts](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeHosts.html) **
- **Description:** Grants permission to describe one or more Dedicated Hosts
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeIamInstanceProfileAssociations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeIamInstanceProfileAssociations.html) **
- **Description:** Grants permission to describe the IAM instance profile associations
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeIdFormat](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeIdFormat.html) **
- **Description:** Grants permission to describe the ID format settings for resources
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeIdentityIdFormat](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeIdentityIdFormat.html) **
- **Description:** Grants permission to describe the ID format settings for resources for an IAM user, IAM role, or root user
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeImageAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeImageAttribute.html) **
- **Description:** Grants permission to describe an attribute of an Amazon Machine Image (AMI)
- **Resource types (\*required):** [image\*](#list_ec2-resource-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Access level:** List
- ** [DescribeImageReferences](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeImageReferences.html) **
- **Description:** Grants permission to describe your Amazon resources that are referencing specified images
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeImageUsageReportEntries](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeImageUsageReportEntries.html) **
- **Description:** Grants permission to describe the entries of an AMI usage report
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeImageUsageReports](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeImageUsageReports.html) **
- **Description:** Grants permission to describe the configuration and status of an AMI usage report
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeImages](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeImages.html) **
- **Description:** Grants permission to describe one or more images (AMIs, AKIs, and ARIs)
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeImportImageTasks](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeImportImageTasks.html) **
- **Description:** Grants permission to describe import virtual machine or import snapshot tasks
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeImportSnapshotTasks](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeImportSnapshotTasks.html) **
- **Description:** Grants permission to describe import snapshot tasks
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeInstanceAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeInstanceAttribute.html) **
- **Description:** Grants permission to describe the attributes of an instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** List
- ** [DescribeInstanceConnectEndpoints](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeInstanceConnectEndpoints.html) **
- **Description:** Grants permission to describe EC2 Instance Connect Endpoints
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeInstanceCreditSpecifications](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeInstanceCreditSpecifications.html) **
- **Description:** Grants permission to describe the credit option for CPU usage of one or more burstable performance instances
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeInstanceEventNotificationAttributes](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeInstanceEventNotificationAttributes.html) **
- **Description:** Grants permission to describe the set of tags to include in notifications about scheduled events for your instances
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeInstanceEventWindows](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeInstanceEventWindows.html) **
- **Description:** Grants permission to describe the specified event windows or all event windows
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeInstanceImageMetadata](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeInstanceImageMetadata.html) **
- **Description:** Grants permission to describe the AMI that was used to launch an instance
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeInstanceSqlHaHistoryStates](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeInstanceSqlHaHistoryStates.html) **
- **Description:** Grants permission to describe EC2 instance SQL HA history states
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeInstanceSqlHaStates](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeInstanceSqlHaStates.html) **
- **Description:** Grants permission to describe EC2 instance SQL HA states
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeInstanceStatus](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeInstanceStatus.html) **
- **Description:** Grants permission to describe the status of one or more instances
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeInstanceTopology](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeInstanceTopology.html) **
- **Description:** Grants permission to describe a tree-based hierarchy that represents the physical host placement of EC2 instances
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeInstanceTypeOfferings](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeInstanceTypeOfferings.html) **
- **Description:** Grants permission to describe the set of instance types that are offered in a location
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeInstanceTypes](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeInstanceTypes.html) **
- **Description:** Grants permission to describe the details of instance types that are offered in a location
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeInstances](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeInstances.html) **
- **Description:** Grants permission to describe one or more instances
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeInternetGateways](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeInternetGateways.html) **
- **Description:** Grants permission to describe one or more internet gateways
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeIpamByoasn](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeIpamByoasn.html) **
- **Description:** Grants permission to describe a bring your own Autonomous System Number (BYOASN) that you've brought to IPAM
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeIpamExternalResourceVerificationTokens](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeIpamExternalResourceVerificationTokens.html) **
- **Description:** Grants permission to describe verification tokens, which proves ownership of an external resource
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeIpamPolicies](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeIpamPolicies.html) **
- **Description:** Grants permission to describe Amazon VPC IP Address Manager (IPAM) policies
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeIpamPoolAllocations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeIpamPoolAllocations.html) **
- **Description:** Grants permission to describe IPAM pool allocations
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeIpamPools](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeIpamPools.html) **
- **Description:** Grants permission to describe Amazon VPC IP Address Manager (IPAM) pools
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeIpamPrefixListResolverTargets](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeIpamPrefixListResolverTargets.html) **
- **Description:** Grants permission to describe IPAM prefix list resolver targets
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeIpamPrefixListResolvers](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeIpamPrefixListResolvers.html) **
- **Description:** Grants permission to describe IPAM prefix list resolvers
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeIpamResourceDiscoveries](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeIpamResourceDiscoveries.html) **
- **Description:** Grants permission to describe IPAM resource discoveries
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeIpamResourceDiscoveryAssociations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeIpamResourceDiscoveryAssociations.html) **
- **Description:** Grants permission to describe resource discovery associations with an Amazon VPC IPAM
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeIpamScopes](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeIpamScopes.html) **
- **Description:** Grants permission to describe Amazon VPC IP Address Manager (IPAM) scopes
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeIpams](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeIpams.html) **
- **Description:** Grants permission to describe an Amazon VPC IP Address Manager (IPAM)
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeIpv6Pools](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeIpv6Pools.html) **
- **Description:** Grants permission to describe one or more IPv6 address pools
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeKeyPairs](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeKeyPairs.html) **
- **Description:** Grants permission to describe one or more key pairs
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeLaunchTemplateVersions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeLaunchTemplateVersions.html) **
- **Description:** Grants permission to describe one or more launch template versions
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeLaunchTemplates](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeLaunchTemplates.html) **
- **Description:** Grants permission to describe one or more launch templates
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations.html) **
- **Description:** Grants permission to describe the associations between virtual interface groups and local gateway route tables
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeLocalGatewayRouteTableVpcAssociations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeLocalGatewayRouteTableVpcAssociations.html) **
- **Description:** Grants permission to describe an association between VPCs and local gateway route tables
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeLocalGatewayRouteTables](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeLocalGatewayRouteTables.html) **
- **Description:** Grants permission to describe one or more local gateway route tables
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeLocalGatewayVirtualInterfaceGroups](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeLocalGatewayVirtualInterfaceGroups.html) **
- **Description:** Grants permission to describe local gateway virtual interface groups
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeLocalGatewayVirtualInterfaces](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeLocalGatewayVirtualInterfaces.html) **
- **Description:** Grants permission to describe local gateway virtual interfaces
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeLocalGateways](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeLocalGateways.html) **
- **Description:** Grants permission to describe one or more local gateways
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeLockedSnapshots](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeLockedSnapshots.html) **
- **Description:** Grants permission to describe the lock status for a snapshot
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeMacHosts](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeMacHosts.html) **
- **Description:** Grants permission to describe your EC2 Mac Dedicated hosts
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeMacModificationTasks](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeMacModificationTasks.html) **
- **Description:** Grants permission to describe a System Integrity Protection (SIP) modification task or volume ownership delegation task for an Amazon EC2 Mac instance
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeManagedPrefixLists](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeManagedPrefixLists.html) **
- **Description:** Grants permission to describe your managed prefix lists and any Amazon-managed prefix lists
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeMovingAddresses](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeMovingAddresses.html) **
- **Description:** Grants permission to describe Elastic IP addresses that are being moved to the EC2-VPC platform
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeNatGateways](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeNatGateways.html) **
- **Description:** Grants permission to describe one or more NAT gateways
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeNetworkAcls](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeNetworkAcls.html) **
- **Description:** Grants permission to describe one or more network ACLs
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeNetworkInsightsAccessScopeAnalyses](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAccessScopeAnalyses.html) **
- **Description:** Grants permission to describe one or more Network Access Scope analyses
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeNetworkInsightsAccessScopes](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAccessScopes.html) **
- **Description:** Grants permission to describe the Network Access Scopes
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeNetworkInsightsAnalyses](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) **
- **Description:** Grants permission to describe one or more network insights analyses
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeNetworkInsightsPaths](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsPaths.html) **
- **Description:** Grants permission to describe one or more network insights paths
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeNetworkInterfaceAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeNetworkInterfaceAttribute.html) **
- **Description:** Grants permission to describe a network interface attribute
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeNetworkInterfacePermissions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeNetworkInterfacePermissions.html) **
- **Description:** Grants permission to describe the permissions that are associated with a network interface
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeNetworkInterfaces](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeNetworkInterfaces.html) **
- **Description:** Grants permission to describe one or more network interfaces
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeOutpostLags](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeOutpostLags.html) **
- **Description:** Grants permission to describe Outpost LAGs
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribePlacementGroups](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribePlacementGroups.html) **
- **Description:** Grants permission to describe one or more placement groups
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribePrefixLists](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribePrefixLists.html) **
- **Description:** Grants permission to describe available Amazon services in a prefix list format
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribePrincipalIdFormat](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribePrincipalIdFormat.html) **
- **Description:** Grants permission to describe the ID format settings for the root user and all IAM roles and IAM users that have explicitly specified a longer ID (17-character ID) preference
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribePublicIpv4Pools](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribePublicIpv4Pools.html) **
- **Description:** Grants permission to describe one or more IPv4 address pools
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeRegions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeRegions.html) **
- **Description:** Grants permission to describe one or more Amazon Web Services Regions that are currently available in your account
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeReplaceRootVolumeTasks](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeReplaceRootVolumeTasks.html) **
- **Description:** Grants permission to describe a root volume replacement task
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeReservedInstances](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeReservedInstances.html) **
- **Description:** Grants permission to describe one or more purchased Reserved Instances in your account
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeReservedInstancesListings](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeReservedInstancesListings.html) **
- **Description:** Grants permission to describe your account's Reserved Instance listings in the Reserved Instance Marketplace
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeReservedInstancesModifications](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeReservedInstancesModifications.html) **
- **Description:** Grants permission to describe the modifications made to one or more Reserved Instances
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeReservedInstancesOfferings](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeReservedInstancesOfferings.html) **
- **Description:** Grants permission to describe the Reserved Instance offerings that are available for purchase
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeRouteServerEndpoints](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeRouteServerEndpoints.html) **
- **Description:** Grants permission to describe one or more route server endpoints
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeRouteServerPeers](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeRouteServerPeers.html) **
- **Description:** Grants permission to describe one or more route server peers
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeRouteServers](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeRouteServers.html) **
- **Description:** Grants permission to describe one or more route servers
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeRouteTables](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeRouteTables.html) **
- **Description:** Grants permission to describe one or more route tables
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeScheduledInstanceAvailability](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeScheduledInstanceAvailability.html) **
- **Description:** Grants permission to find available schedules for Scheduled Instances
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeScheduledInstances](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeScheduledInstances.html) **
- **Description:** Grants permission to describe one or more Scheduled Instances in your account
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeSecondaryInterfaces](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeSecondaryInterfaces.html) **
- **Description:** Grants permission to describe one or more secondary interfaces
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeSecondaryNetworks](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeSecondaryNetworks.html) **
- **Description:** Grants permission to describe one or more secondary networks
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeSecondarySubnets](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeSecondarySubnets.html) **
- **Description:** Grants permission to describe one or more secondary subnets
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeSecurityGroupReferences](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeSecurityGroupReferences.html) **
- **Description:** Grants permission to describe the VPCs on the other side of a VPC peering connection that are referencing specified VPC security groups
- **Resource types (\*required):** [security-group\*](#list_ec2-resource-security-group)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** List
- ** [DescribeSecurityGroupRules](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeSecurityGroupRules.html) **
- **Description:** Grants permission to describe one or more of your security group rules
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeSecurityGroupVpcAssociations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeSecurityGroupVpcAssociations.html) **
- **Description:** Grants permission to describe security group VPC associations
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeSecurityGroups](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeSecurityGroups.html) **
- **Description:** Grants permission to describe one or more security groups
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeServiceLinkVirtualInterfaces](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeServiceLinkVirtualInterfaces.html) **
- **Description:** Grants permission to describe service link virtual interfaces
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeSnapshotAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeSnapshotAttribute.html) **
- **Description:** Grants permission to describe an attribute of a snapshot
- **Resource types (\*required):** [snapshot\*](#list_ec2-resource-snapshot)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Access level:** List
- ** [DescribeSnapshotTierStatus](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeSnapshotTierStatus.html) **
- **Description:** Grants permission to describe the storage tier status for Amazon EBS snapshots
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeSnapshots](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeSnapshots.html) **
- **Description:** Grants permission to describe one or more EBS snapshots
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeSpotDatafeedSubscription](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeSpotDatafeedSubscription.html) **
- **Description:** Grants permission to describe the data feed for Spot Instances
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeSpotFleetInstances](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeSpotFleetInstances.html) **
- **Description:** Grants permission to describe the running instances for a Spot Fleet
- **Resource types (\*required):** [spot-fleet-request\*](#list_ec2-resource-spot-fleet-request)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** List
- ** [DescribeSpotFleetRequestHistory](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeSpotFleetRequestHistory.html) **
- **Description:** Grants permission to describe the events for a Spot Fleet request during a specified time
- **Resource types (\*required):** [spot-fleet-request\*](#list_ec2-resource-spot-fleet-request)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** List
- ** [DescribeSpotFleetRequests](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeSpotFleetRequests.html) **
- **Description:** Grants permission to describe one or more Spot Fleet requests
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeSpotInstanceRequests](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeSpotInstanceRequests.html) **
- **Description:** Grants permission to describe one or more Spot Instance requests
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeSpotPriceHistory](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeSpotPriceHistory.html) **
- **Description:** Grants permission to describe the Spot Instance price history
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeStaleSecurityGroups](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeStaleSecurityGroups.html) **
- **Description:** Grants permission to describe the stale security group rules for security groups in a specified VPC
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeStoreImageTasks](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeStoreImageTasks.html) **
- **Description:** Grants permission to describe the progress of the AMI store tasks
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeSubnets](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeSubnets.html) **
- **Description:** Grants permission to describe one or more subnets
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeTags](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeTags.html) **
- **Description:** Grants permission to describe one or more tags for an Amazon EC2 resource
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeTrafficMirrorFilterRules](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeTrafficMirrorFilterRules.html) **
- **Description:** Grants permission to describe traffic mirror filters that determine the traffic that is mirrored
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeTrafficMirrorFilters](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeTrafficMirrorFilters.html) **
- **Description:** Grants permission to describe one or more traffic mirror filters
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeTrafficMirrorSessions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeTrafficMirrorSessions.html) **
- **Description:** Grants permission to describe one or more traffic mirror sessions
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeTrafficMirrorTargets](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeTrafficMirrorTargets.html) **
- **Description:** Grants permission to describe one or more traffic mirror targets
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeTransitGatewayAttachments](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeTransitGatewayAttachments.html) **
- **Description:** Grants permission to describe one or more attachments between resources and transit gateways
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeTransitGatewayConnectPeers](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeTransitGatewayConnectPeers.html) **
- **Description:** Grants permission to describe one or more transit gateway connect peers
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeTransitGatewayConnects](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeTransitGatewayConnects.html) **
- **Description:** Grants permission to describe one or more transit gateway connect attachments
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeTransitGatewayMeteringPolicies](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeTransitGatewayMeteringPolicies.html) **
- **Description:** Grants permission to describe one or more transit gateway metering policies
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeTransitGatewayMulticastDomains](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeTransitGatewayMulticastDomains.html) **
- **Description:** Grants permission to describe one or more transit gateway multicast domains
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeTransitGatewayPeeringAttachments](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeTransitGatewayPeeringAttachments.html) **
- **Description:** Grants permission to describe one or more transit gateway peering attachments
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeTransitGatewayPolicyTables](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeTransitGatewayPolicyTables.html) **
- **Description:** Grants permission to describe a transit gateway policy table
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeTransitGatewayRouteTableAnnouncements](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeTransitGatewayRouteTableAnnouncements.html) **
- **Description:** Grants permission to describe a transit gateway route table announcement
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeTransitGatewayRouteTables](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeTransitGatewayRouteTables.html) **
- **Description:** Grants permission to describe one or more transit gateway route tables
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeTransitGatewayVpcAttachments](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeTransitGatewayVpcAttachments.html) **
- **Description:** Grants permission to describe one or more VPC attachments on a transit gateway
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeTransitGateways](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeTransitGateways.html) **
- **Description:** Grants permission to describe one or more transit gateways
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeTrunkInterfaceAssociations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeTrunkInterfaceAssociations.html) **
- **Description:** Grants permission to describe one or more network interface trunk associations
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVerifiedAccessEndpoints](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVerifiedAccessEndpoints.html) **
- **Description:** Grants permission to describe the specified Verified Access endpoints or all Verified Access endpoints
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVerifiedAccessGroups](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVerifiedAccessGroups.html) **
- **Description:** Grants permission to describe the specified Verified Access groups or all Verified Access groups
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVerifiedAccessInstanceLoggingConfigurations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVerifiedAccessInstanceLoggingConfigurations.html) **
- **Description:** Grants permission to describe the current logging configuration for the Verified Access instances
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVerifiedAccessInstances](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVerifiedAccessInstances.html) **
- **Description:** Grants permission to describe the specified Verified Access instances or all Verified Access instances
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVerifiedAccessTrustProviders](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVerifiedAccessTrustProviders.html) **
- **Description:** Grants permission to describe details of existing Verified Access trust providers
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVolumeAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVolumeAttribute.html) **
- **Description:** Grants permission to describe an attribute of an EBS volume
- **Resource types (\*required):** [volume\*](#list_ec2-resource-volume)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType)
- **Access level:** List
- ** [DescribeVolumeStatus](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVolumeStatus.html) **
- **Description:** Grants permission to describe the status of one or more EBS volumes
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVolumes](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVolumes.html) **
- **Description:** Grants permission to describe one or more EBS volumes
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVolumesModifications](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVolumesModifications.html) **
- **Description:** Grants permission to describe the current modification status of one or more EBS volumes
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVpcAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVpcAttribute.html) **
- **Description:** Grants permission to describe an attribute of a VPC
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** List
- ** [DescribeVpcBlockPublicAccessExclusions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVpcBlockPublicAccessExclusions.html) **
- **Description:** Grants permission to describe an exclusion list for blocked public access on a VPC
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVpcBlockPublicAccessOptions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVpcBlockPublicAccessOptions.html) **
- **Description:** Grants permission to describe options for blocked public access on a VPC
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVpcClassicLink](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVpcClassicLink.html) **
- **Description:** Grants permission to describe the ClassicLink status of one or more VPCs
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVpcClassicLinkDnsSupport](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVpcClassicLinkDnsSupport.html) **
- **Description:** Grants permission to describe the ClassicLink DNS support status of one or more VPCs
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVpcEncryptionControls](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVpcEncryptionControls.html) **
- **Description:** Grants permission to describe one or more VPC Encryption Controls
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVpcEndpointAssociations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVpcEndpointAssociations.html) **
- **Description:** Grants permission to describe the VPC endpoint associations
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVpcEndpointConnectionNotifications](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVpcEndpointConnectionNotifications.html) **
- **Description:** Grants permission to describe the connection notifications for VPC endpoints and VPC endpoint services
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVpcEndpointConnections](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVpcEndpointConnections.html) **
- **Description:** Grants permission to describe the VPC endpoint connections to your VPC endpoint services
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVpcEndpointServiceConfigurations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVpcEndpointServiceConfigurations.html) **
- **Description:** Grants permission to describe VPC endpoint service configurations (your services)
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVpcEndpointServicePermissions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVpcEndpointServicePermissions.html) **
- **Description:** Grants permission to describe the principals (service consumers) that are permitted to discover your VPC endpoint service
- **Resource types (\*required):** [vpc-endpoint-service\*](#list_ec2-resource-vpc-endpoint-service)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpceServicePrivateDnsName](#list_ec2-ec2_VpceServicePrivateDnsName)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
[ec2:VpceSupportedRegion](#list_ec2-ec2_VpceSupportedRegion)
- **Access level:** List
- ** [DescribeVpcEndpointServices](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVpcEndpointServices.html) **
- **Description:** Grants permission to describe all supported Amazon services that can be specified when creating a VPC endpoint
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVpcEndpoints](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVpcEndpoints.html) **
- **Description:** Grants permission to describe one or more VPC endpoints
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVpcPeeringConnections](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVpcPeeringConnections.html) **
- **Description:** Grants permission to describe one or more VPC peering connections
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVpcs](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVpcs.html) **
- **Description:** Grants permission to describe one or more VPCs
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVpnConcentrators](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVpnConcentrators.html) **
- **Description:** Grants permission to describe one or more VPN concentrators
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVpnConnections](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVpnConnections.html) **
- **Description:** Grants permission to describe one or more VPN connections
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVpnGateways](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DescribeVpnGateways.html) **
- **Description:** Grants permission to describe one or more virtual private gateways
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DetachClassicLinkVpc](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DetachClassicLinkVpc.html) **
- **Description:** Grants permission to unlink (detach) a linked EC2-Classic instance from a VPC
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [DetachImageWatermark](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DetachImageWatermark.html) **
- **Description:** Grants permission to detach a watermark from an Amazon Machine Image (AMI)
- **Resource types (\*required):** [image\*](#list_ec2-resource-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Access level:** Write
- ** [DetachInternetGateway](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DetachInternetGateway.html) **
- **Description:** Grants permission to detach an internet gateway from a VPC
- **Resource types (\*required):** [internet-gateway\*](#list_ec2-resource-internet-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:InternetGatewayID](#list_ec2-ec2_InternetGatewayID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [DetachNetworkInterface](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DetachNetworkInterface.html) **
- **Description:** Grants permission to detach a network interface from an instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [network-interface\*](#list_ec2-resource-network-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [DetachVerifiedAccessTrustProvider](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DetachVerifiedAccessTrustProvider.html) **
- **Description:** Grants permission to detach a trust provider from a Verified Access instance
- **Resource types (\*required):** [verified-access-instance\*](#list_ec2-resource-verified-access-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [verified-access-trust-provider\*](#list_ec2-resource-verified-access-trust-provider) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DetachVolume](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DetachVolume.html) **
- **Description:** Grants permission to detach an EBS volume from an instance
- **Resource types (\*required):** [instance](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [volume\*](#list_ec2-resource-volume) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType)
- **Access level:** Write
- ** [DetachVpnGateway](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DetachVpnGateway.html) **
- **Description:** Grants permission to detach a virtual private gateway from a VPC
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Resource types (\*required):** [vpn-gateway\*](#list_ec2-resource-vpn-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DisableAddressTransfer](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisableAddressTransfer.html) **
- **Description:** Grants permission to disable Elastic IP address transfer
- **Resource types (\*required):** [elastic-ip\*](#list_ec2-resource-elastic-ip)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AllocationId](#list_ec2-ec2_AllocationId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Domain](#list_ec2-ec2_Domain)
[ec2:PublicIpAddress](#list_ec2-ec2_PublicIpAddress)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DisableAllowedImagesSettings](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisableAllowedImagesSettings.html) **
- **Description:** Grants permission to disable allowed images settings
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [DisableAwsNetworkPerformanceMetricSubscription](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisableAwsNetworkPerformanceMetricSubscription.html) **
- **Description:** Grants permission to disable infrastructure performance metric subscriptions
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [DisableCapacityManager](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisableCapacityManager.html) **
- **Description:** Grants permission to disable EC2 Capacity Manager for your account
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [DisableEbsEncryptionByDefault](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisableEbsEncryptionByDefault.html) **
- **Description:** Grants permission to disable EBS encryption by default for your account
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [DisableFastLaunch](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisableFastLaunch.html) **
- **Description:** Grants permission to disable faster launching for Windows AMIs
- **Resource types (\*required):** [image\*](#list_ec2-resource-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Access level:** Write
- ** [DisableFastSnapshotRestores](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisableFastSnapshotRestores.html) **
- **Description:** Grants permission to disable fast snapshot restores for one or more snapshots in specified Availability Zones
- **Resource types (\*required):** [snapshot\*](#list_ec2-resource-snapshot)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Access level:** Write
- ** [DisableImage](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisableImage.html) **
- **Description:** Grants permission to disable an AMI
- **Resource types (\*required):** [image\*](#list_ec2-resource-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Access level:** Write
- ** [DisableImageBlockPublicAccess](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisableImageBlockPublicAccess.html) **
- **Description:** Grants permission to disable block public access for AMIs at the account level in the specified Amazon Web Services Region
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Permissions management, Write
- ** [DisableImageDeprecation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisableImageDeprecation.html) **
- **Description:** Grants permission to cancel the deprecation of the specified AMI
- **Resource types (\*required):** [image\*](#list_ec2-resource-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Access level:** Write
- ** [DisableImageDeregistrationProtection](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisableImageDeregistrationProtection.html) **
- **Description:** Grants permission to disable deregistration protection for an AMI. When deregistration protection is disabled, the AMI can be deregistered
- **Resource types (\*required):** [image\*](#list_ec2-resource-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Access level:** Write
- ** [DisableInstanceSqlHaStandbyDetections](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisableInstanceSqlHaStandbyDetections.html) **
- **Description:** Grants permission to disable EC2 instance SQL HA standby detections
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [DisableIpamOrganizationAdminAccount](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisableIpamOrganizationAdminAccount.html) **
- **Description:** Grants permission to disable an Amazon Organizations member account as an Amazon VPC IP Address Manager (IPAM) admin account
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [DisableIpamPolicy](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisableIpamPolicy.html) **
- **Description:** Grants permission to disable a policy in Amazon VPC IP Address Manager (IPAM) that controls public IPv4 address allocation
- **Resource types (\*required):** [ipam-policy\*](#list_ec2-resource-ipam-policy)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DisableRouteServerPropagation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisableRouteServerPropagation.html) **
- **Description:** Grants permission to disable route server propagation
- **Resource types (\*required):** [route-server\*](#list_ec2-resource-route-server) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [route-table\*](#list_ec2-resource-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RouteTableID](#list_ec2-ec2_RouteTableID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [DisableSerialConsoleAccess](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisableSerialConsoleAccess.html) **
- **Description:** Grants permission to disable access to the EC2 serial console of all instances for your account
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [DisableSnapshotBlockPublicAccess](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisableSnapshotBlockPublicAccess.html) **
- **Description:** Grants permission to disable the block public access for snapshots setting for a Region
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Permissions management, Write
- ** [DisableTransitGatewayRouteTablePropagation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisableTransitGatewayRouteTablePropagation.html) **
- **Description:** Grants permission to disable a resource attachment from propagating routes to the specified propagation route table
- **Resource types (\*required):** [transit-gateway-attachment](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [transit-gateway-route-table\*](#list_ec2-resource-transit-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableId](#list_ec2-ec2_transitGatewayRouteTableId)
- **Resource types (\*required):** [transit-gateway-route-table-announcement](#list_ec2-resource-transit-gateway-route-table-announcement) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableAnnouncementId](#list_ec2-ec2_transitGatewayRouteTableAnnouncementId)
- **Access level:** Write
- ** [DisableVgwRoutePropagation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisableVgwRoutePropagation.html) **
- **Description:** Grants permission to disable a virtual private gateway from propagating routes to a specified route table of a VPC
- **Resource types (\*required):** [route-table\*](#list_ec2-resource-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RouteTableID](#list_ec2-ec2_RouteTableID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [vpn-gateway\*](#list_ec2-resource-vpn-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DisableVpcClassicLink](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisableVpcClassicLink.html) **
- **Description:** Grants permission to disable ClassicLink for a VPC
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [DisableVpcClassicLinkDnsSupport](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisableVpcClassicLinkDnsSupport.html) **
- **Description:** Grants permission to disable ClassicLink DNS support for a VPC
- **Resource types (\*required):** [vpc](#list_ec2-resource-vpc)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [DisassociateAddress](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisassociateAddress.html) **
- **Description:** Grants permission to disassociate an Elastic IP address from an instance or network interface
- **Resource types (\*required):** [elastic-ip](#list_ec2-resource-elastic-ip) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AllocationId](#list_ec2-ec2_AllocationId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Domain](#list_ec2-ec2_Domain)
[ec2:PublicIpAddress](#list_ec2-ec2_PublicIpAddress)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [network-interface](#list_ec2-resource-network-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [DisassociateCapacityReservationBillingOwner](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisassociateCapacityReservationBillingOwner.html) **
- **Description:** Grants permission to cancel a pending request to assign billing of the unused capacity of a Capacity Reservation to a consumer account
- **Resource types (\*required):** [capacity-reservation\*](#list_ec2-resource-capacity-reservation)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CapacityReservationFleet](#list_ec2-ec2_CapacityReservationFleet)
[ec2:CommitmentDuration](#list_ec2-ec2_CommitmentDuration)
[ec2:CreateDate](#list_ec2-ec2_CreateDate)
[ec2:DestinationCapacityReservationId](#list_ec2-ec2_DestinationCapacityReservationId)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:EndDate](#list_ec2-ec2_EndDate)
[ec2:EndDateType](#list_ec2-ec2_EndDateType)
[ec2:EphemeralStorage](#list_ec2-ec2_EphemeralStorage)
[ec2:InstanceCount](#list_ec2-ec2_InstanceCount)
[ec2:InstanceMatchCriteria](#list_ec2-ec2_InstanceMatchCriteria)
[ec2:InstancePlatform](#list_ec2-ec2_InstancePlatform)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:InterruptibleCapacityReservationId](#list_ec2-ec2_InterruptibleCapacityReservationId)
[ec2:InterruptionType](#list_ec2-ec2_InterruptionType)
[ec2:IsInterruptible](#list_ec2-ec2_IsInterruptible)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SourceCapacityReservationId](#list_ec2-ec2_SourceCapacityReservationId)
[ec2:TargetInstanceCount](#list_ec2-ec2_TargetInstanceCount)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [DisassociateClientVpnTargetNetwork](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisassociateClientVpnTargetNetwork.html) **
- **Description:** Grants permission to disassociate a target network from a Client VPN endpoint
- **Resource types (\*required):** [client-vpn-endpoint\*](#list_ec2-resource-client-vpn-endpoint)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ClientRootCertificateChainArn](#list_ec2-ec2_ClientRootCertificateChainArn)
[ec2:CloudwatchLogGroupArn](#list_ec2-ec2_CloudwatchLogGroupArn)
[ec2:CloudwatchLogStreamArn](#list_ec2-ec2_CloudwatchLogStreamArn)
[ec2:DirectoryArn](#list_ec2-ec2_DirectoryArn)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SamlProviderArn](#list_ec2-ec2_SamlProviderArn)
[ec2:ServerCertificateArn](#list_ec2-ec2_ServerCertificateArn)
- **Access level:** Write
- ** [DisassociateEnclaveCertificateIamRole](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisassociateEnclaveCertificateIamRole.html) **
- **Description:** Grants permission to disassociate an ACM certificate from a IAM role
- **Resource types (\*required):** [certificate\*](#list_ec2-resource-certificate) / **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Resource types (\*required):** [role\*](#list_ec2-resource-role) / **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [DisassociateIamInstanceProfile](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisassociateIamInstanceProfile.html) **
- **Description:** Grants permission to disassociate an IAM instance profile from a running or stopped instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [DisassociateInstanceEventWindow](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisassociateInstanceEventWindow.html) **
- **Description:** Grants permission to disassociate one or more targets from an event window
- **Resource types (\*required):** [instance-event-window\*](#list_ec2-resource-instance-event-window)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DisassociateIpamByoasn](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisassociateIpamByoasn.html) **
- **Description:** Grants permission to disassociate an Autonomous System Number (ASN) from a BYOIP CIDR
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [DisassociateIpamResourceDiscovery](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisassociateIpamResourceDiscovery.html) **
- **Description:** Grants permission to disassociate a resource discovery from an Amazon VPC IPAM
- **Resource types (\*required):** [ipam-resource-discovery-association\*](#list_ec2-resource-ipam-resource-discovery-association)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DisassociateNatGatewayAddress](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisassociateNatGatewayAddress.html) **
- **Description:** Grants permission to disassociate a secondary Elastic IP address from a public NAT gateway
- **Resource types (\*required):** [elastic-ip\*](#list_ec2-resource-elastic-ip) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AllocationId](#list_ec2-ec2_AllocationId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Domain](#list_ec2-ec2_Domain)
[ec2:PublicIpAddress](#list_ec2-ec2_PublicIpAddress)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [natgateway\*](#list_ec2-resource-natgateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [network-interface](#list_ec2-resource-network-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [DisassociateRouteServer](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisassociateRouteServer.html) **
- **Description:** Grants permission to disassociate a route server from a VPC
- **Resource types (\*required):** [route-server\*](#list_ec2-resource-route-server) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [DisassociateRouteTable](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisassociateRouteTable.html) **
- **Description:** Grants permission to disassociate a subnet from a route table
- **Resource types (\*required):** [internet-gateway](#list_ec2-resource-internet-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:InternetGatewayID](#list_ec2-ec2_InternetGatewayID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipv4pool-ec2](#list_ec2-resource-ipv4pool-ec2) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipv6pool-ec2](#list_ec2-resource-ipv6pool-ec2) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [route-table](#list_ec2-resource-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RouteTableID](#list_ec2-ec2_RouteTableID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [vpn-gateway](#list_ec2-resource-vpn-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [DisassociateSecurityGroupVpc](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisassociateSecurityGroupVpc.html) **
- **Description:** Grants permission to disassociate a security group from a VPC
- **Resource types (\*required):** [security-group\*](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [vpc](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [DisassociateSubnetCidrBlock](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisassociateSubnetCidrBlock.html) **
- **Description:** Grants permission to disassociate a CIDR block from a subnet
- **Resource types (\*required):** [subnet\*](#list_ec2-resource-subnet)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [DisassociateTransitGatewayMulticastDomain](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisassociateTransitGatewayMulticastDomain.html) **
- **Description:** Grants permission to disassociate one or more subnets from a transit gateway multicast domain
- **Resource types (\*required):** [subnet\*](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [transit-gateway-attachment\*](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [transit-gateway-multicast-domain\*](#list_ec2-resource-transit-gateway-multicast-domain) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMulticastDomainId](#list_ec2-ec2_transitGatewayMulticastDomainId)
- **Access level:** Write
- ** [DisassociateTransitGatewayPolicyTable](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisassociateTransitGatewayPolicyTable.html) **
- **Description:** Grants permission to disassociate a policy table from a transit gateway
- **Resource types (\*required):** [transit-gateway-attachment\*](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [transit-gateway-policy-table\*](#list_ec2-resource-transit-gateway-policy-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayPolicyTableId](#list_ec2-ec2_transitGatewayPolicyTableId)
- **Access level:** Write
- ** [DisassociateTransitGatewayRouteTable](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisassociateTransitGatewayRouteTable.html) **
- **Description:** Grants permission to disassociate a resource attachment from a transit gateway route table
- **Resource types (\*required):** [transit-gateway-attachment\*](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [transit-gateway-route-table\*](#list_ec2-resource-transit-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableId](#list_ec2-ec2_transitGatewayRouteTableId)
- **Access level:** Write
- ** [DisassociateTrunkInterface](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisassociateTrunkInterface.html) **
- **Description:** Grants permission to disassociate a branch network interface to a trunk network interface
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [DisassociateVpcCidrBlock](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DisassociateVpcCidrBlock.html) **
- **Description:** Grants permission to disassociate a CIDR block from a VPC
- **Resource types (\*required):** [vpc](#list_ec2-resource-vpc)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [EnableAddressTransfer](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableAddressTransfer.html) **
- **Description:** Grants permission to enable Elastic IP address transfer
- **Resource types (\*required):** [elastic-ip\*](#list_ec2-resource-elastic-ip)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AllocationId](#list_ec2-ec2_AllocationId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Domain](#list_ec2-ec2_Domain)
[ec2:PublicIpAddress](#list_ec2-ec2_PublicIpAddress)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [EnableAllowedImagesSettings](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableAllowedImagesSettings.html) **
- **Description:** Grants permission to enable allowed images settings
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [EnableAwsNetworkPerformanceMetricSubscription](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableAwsNetworkPerformanceMetricSubscription.html) **
- **Description:** Grants permission to enable infrastructure performance subscriptions
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [EnableCapacityManager](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableCapacityManager.html) **
- **Description:** Grants permission to enable EC2 Capacity Manager for your account
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [EnableEbsEncryptionByDefault](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableEbsEncryptionByDefault.html) **
- **Description:** Grants permission to enable EBS encryption by default for your account
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [EnableFastLaunch](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableFastLaunch.html) **
- **Description:** Grants permission to enable faster launching for Windows AMIs
- **Resource types (\*required):** [image\*](#list_ec2-resource-image) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Resource types (\*required):** [launch-template](#list_ec2-resource-launch-template) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [EnableFastSnapshotRestores](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableFastSnapshotRestores.html) **
- **Description:** Grants permission to enable fast snapshot restores for one or more snapshots in specified Availability Zones
- **Resource types (\*required):** [snapshot\*](#list_ec2-resource-snapshot)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Access level:** Write
- ** [EnableImage](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableImage.html) **
- **Description:** Grants permission to re-enable a disabled AMI
- **Resource types (\*required):** [image\*](#list_ec2-resource-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Access level:** Write
- ** [EnableImageBlockPublicAccess](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableImageBlockPublicAccess.html) **
- **Description:** Grants permission to enable block public access for AMIs at the account level in the specified Amazon Web Services Region
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Permissions management, Write
- ** [EnableImageDeprecation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableImageDeprecation.html) **
- **Description:** Grants permission to enable deprecation of the specified AMI at the specified date and time
- **Resource types (\*required):** [image\*](#list_ec2-resource-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Access level:** Write
- ** [EnableImageDeregistrationProtection](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableImageDeregistrationProtection.html) **
- **Description:** Grants permission to enable deregistration protection for an AMI. When deregistration protection is enabled, the AMI can't be deregistered
- **Resource types (\*required):** [image\*](#list_ec2-resource-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Access level:** Write
- ** [EnableInstanceSqlHaStandbyDetections](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableInstanceSqlHaStandbyDetections.html) **
- **Description:** Grants permission to enable EC2 instance SQL HA standby detections
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [EnableIpamOrganizationAdminAccount](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableIpamOrganizationAdminAccount.html) **
- **Description:** Grants permission to enable an Amazon Organizations member account as an Amazon VPC IP Address Manager (IPAM) admin account
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [EnableIpamPolicy](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableIpamPolicy.html) **
- **Description:** Grants permission to enable an Amazon VPC IP Address Manager (IPAM) policy
- **Resource types (\*required):** [ipam-policy\*](#list_ec2-resource-ipam-policy)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [EnableReachabilityAnalyzerOrganizationSharing](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableReachabilityAnalyzerOrganizationSharing.html) **
- **Description:** Grants permission to enable organization sharing of reachability analyzer
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [EnableRouteServerPropagation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableRouteServerPropagation.html) **
- **Description:** Grants permission to enable route server propagation
- **Resource types (\*required):** [route-server\*](#list_ec2-resource-route-server) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [route-table\*](#list_ec2-resource-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RouteTableID](#list_ec2-ec2_RouteTableID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [EnableSerialConsoleAccess](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableSerialConsoleAccess.html) **
- **Description:** Grants permission to enable access to the EC2 serial console of all instances for your account
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [EnableSnapshotBlockPublicAccess](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableSnapshotBlockPublicAccess.html) **
- **Description:** Grants permission to enable or modify the block public access for snapshots setting for a Region
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Permissions management, Write
- ** [EnableTransitGatewayRouteTablePropagation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableTransitGatewayRouteTablePropagation.html) **
- **Description:** Grants permission to enable an attachment to propagate routes to a propagation route table
- **Resource types (\*required):** [transit-gateway-attachment](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [transit-gateway-route-table\*](#list_ec2-resource-transit-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableId](#list_ec2-ec2_transitGatewayRouteTableId)
- **Resource types (\*required):** [transit-gateway-route-table-announcement](#list_ec2-resource-transit-gateway-route-table-announcement) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableAnnouncementId](#list_ec2-ec2_transitGatewayRouteTableAnnouncementId)
- **Access level:** Write
- ** [EnableVgwRoutePropagation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableVgwRoutePropagation.html) **
- **Description:** Grants permission to enable a virtual private gateway to propagate routes to a VPC route table
- **Resource types (\*required):** [route-table\*](#list_ec2-resource-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RouteTableID](#list_ec2-ec2_RouteTableID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [vpn-gateway\*](#list_ec2-resource-vpn-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [EnableVolumeIO](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableVolumeIO.html) **
- **Description:** Grants permission to enable I/O operations for a volume that had I/O operations disabled
- **Resource types (\*required):** [volume\*](#list_ec2-resource-volume)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType)
- **Access level:** Write
- ** [EnableVpcClassicLink](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableVpcClassicLink.html) **
- **Description:** Grants permission to enable a VPC for ClassicLink
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [EnableVpcClassicLinkDnsSupport](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_EnableVpcClassicLinkDnsSupport.html) **
- **Description:** Grants permission to enable a VPC to support DNS hostname resolution for ClassicLink
- **Resource types (\*required):** [vpc](#list_ec2-resource-vpc)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [ExportClientVpnClientCertificateRevocationList](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ExportClientVpnClientCertificateRevocationList.html) **
- **Description:** Grants permission to download the client certificate revocation list for a Client VPN endpoint
- **Resource types (\*required):** [client-vpn-endpoint\*](#list_ec2-resource-client-vpn-endpoint)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ClientRootCertificateChainArn](#list_ec2-ec2_ClientRootCertificateChainArn)
[ec2:CloudwatchLogGroupArn](#list_ec2-ec2_CloudwatchLogGroupArn)
[ec2:CloudwatchLogStreamArn](#list_ec2-ec2_CloudwatchLogStreamArn)
[ec2:DirectoryArn](#list_ec2-ec2_DirectoryArn)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SamlProviderArn](#list_ec2-ec2_SamlProviderArn)
[ec2:ServerCertificateArn](#list_ec2-ec2_ServerCertificateArn)
- **Access level:** Read
- ** [ExportClientVpnClientConfiguration](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ExportClientVpnClientConfiguration.html) **
- **Description:** Grants permission to download the contents of the Client VPN endpoint configuration file for a Client VPN endpoint
- **Resource types (\*required):** [client-vpn-endpoint\*](#list_ec2-resource-client-vpn-endpoint)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ClientRootCertificateChainArn](#list_ec2-ec2_ClientRootCertificateChainArn)
[ec2:CloudwatchLogGroupArn](#list_ec2-ec2_CloudwatchLogGroupArn)
[ec2:CloudwatchLogStreamArn](#list_ec2-ec2_CloudwatchLogStreamArn)
[ec2:DirectoryArn](#list_ec2-ec2_DirectoryArn)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SamlProviderArn](#list_ec2-ec2_SamlProviderArn)
[ec2:ServerCertificateArn](#list_ec2-ec2_ServerCertificateArn)
- **Access level:** Read
- ** [ExportImage](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ExportImage.html) **
- **Description:** Grants permission to export an Amazon Machine Image (AMI) to a VM file
- **Resource types (\*required):** [export-image-task\*](#list_ec2-resource-export-image-task) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [image\*](#list_ec2-resource-image) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Access level:** Write
- ** [ExportTransitGatewayRoutes](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ExportTransitGatewayRoutes.html) **
- **Description:** Grants permission to export routes from a transit gateway route table to an Amazon S3 bucket
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [ExportVerifiedAccessInstanceClientConfiguration](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ExportVerifiedAccessInstanceClientConfiguration.html) **
- **Description:** Grants permission to export a verified access instance client configuration
- **Resource types (\*required):** [verified-access-instance\*](#list_ec2-resource-verified-access-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetActiveVpnTunnelStatus](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetActiveVpnTunnelStatus.html) **
- **Description:** Grants permission to retrieve the current security parameters for an active VPN tunnel
- **Resource types (\*required):** [vpn-connection\*](#list_ec2-resource-vpn-connection)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthenticationType](#list_ec2-ec2_AuthenticationType)
[ec2:DPDTimeoutSeconds](#list_ec2-ec2_DPDTimeoutSeconds)
[ec2:GatewayType](#list_ec2-ec2_GatewayType)
[ec2:IKEVersions](#list_ec2-ec2_IKEVersions)
[ec2:InsideTunnelCidr](#list_ec2-ec2_InsideTunnelCidr)
[ec2:InsideTunnelIpv6Cidr](#list_ec2-ec2_InsideTunnelIpv6Cidr)
[ec2:Phase1DHGroup](#list_ec2-ec2_Phase1DHGroup)
[ec2:Phase1EncryptionAlgorithms](#list_ec2-ec2_Phase1EncryptionAlgorithms)
[ec2:Phase1IntegrityAlgorithms](#list_ec2-ec2_Phase1IntegrityAlgorithms)
[ec2:Phase1LifetimeSeconds](#list_ec2-ec2_Phase1LifetimeSeconds)
[ec2:Phase2DHGroup](#list_ec2-ec2_Phase2DHGroup)
[ec2:Phase2EncryptionAlgorithms](#list_ec2-ec2_Phase2EncryptionAlgorithms)
[ec2:Phase2IntegrityAlgorithms](#list_ec2-ec2_Phase2IntegrityAlgorithms)
[ec2:Phase2LifetimeSeconds](#list_ec2-ec2_Phase2LifetimeSeconds)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RekeyFuzzPercentage](#list_ec2-ec2_RekeyFuzzPercentage)
[ec2:RekeyMarginTimeSeconds](#list_ec2-ec2_RekeyMarginTimeSeconds)
[ec2:ReplayWindowSizePackets](#list_ec2-ec2_ReplayWindowSizePackets)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RoutingType](#list_ec2-ec2_RoutingType)
- **Access level:** Read
- ** [GetAllowedImagesSettings](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetAllowedImagesSettings.html) **
- **Description:** Grants permission to get the allowed settings for images
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Read
- ** [GetAssociatedEnclaveCertificateIamRoles](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetAssociatedEnclaveCertificateIamRoles.html) **
- **Description:** Grants permission to get the list of roles associated with an ACM certificate
- **Resource types (\*required):** [certificate\*](#list_ec2-resource-certificate)
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Read
- ** [GetAssociatedIpv6PoolCidrs](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetAssociatedIpv6PoolCidrs.html) **
- **Description:** Grants permission to get information about the IPv6 CIDR block associations for a specified IPv6 address pool
- **Resource types (\*required):** [ipv6pool-ec2\*](#list_ec2-resource-ipv6pool-ec2)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetAwsNetworkPerformanceData](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetAwsNetworkPerformanceData.html) **
- **Description:** Grants permission to get network performance data
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Read
- ** [GetCapacityManagerAttributes](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetCapacityManagerAttributes.html) **
- **Description:** Grants permission to retrieve the current configuration and status of EC2 Capacity Manager
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Read
- ** [GetCapacityManagerMetricData](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetCapacityManagerMetricData.html) **
- **Description:** Grants permission to retrieve capacity usage metrics for your EC2 resources
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Read
- ** [GetCapacityManagerMetricDimensions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetCapacityManagerMetricDimensions.html) **
- **Description:** Grants permission to retrieve the available dimension values for capacity metrics within a specified time range
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Read
- ** [GetCapacityManagerMonitoredTagKeys](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetCapacityManagerMonitoredTagKeys.html) **
- **Description:** Grants permission to retrieve the tag keys that are currently being monitored by EC2 Capacity Manager
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [GetCapacityReservationUsage](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetCapacityReservationUsage.html) **
- **Description:** Grants permission to get usage information about a Capacity Reservation
- **Resource types (\*required):** [capacity-reservation\*](#list_ec2-resource-capacity-reservation)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CapacityReservationFleet](#list_ec2-ec2_CapacityReservationFleet)
[ec2:CommitmentDuration](#list_ec2-ec2_CommitmentDuration)
[ec2:CreateDate](#list_ec2-ec2_CreateDate)
[ec2:DestinationCapacityReservationId](#list_ec2-ec2_DestinationCapacityReservationId)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:EndDate](#list_ec2-ec2_EndDate)
[ec2:EndDateType](#list_ec2-ec2_EndDateType)
[ec2:EphemeralStorage](#list_ec2-ec2_EphemeralStorage)
[ec2:InstanceCount](#list_ec2-ec2_InstanceCount)
[ec2:InstanceMatchCriteria](#list_ec2-ec2_InstanceMatchCriteria)
[ec2:InstancePlatform](#list_ec2-ec2_InstancePlatform)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:InterruptibleCapacityReservationId](#list_ec2-ec2_InterruptibleCapacityReservationId)
[ec2:InterruptionType](#list_ec2-ec2_InterruptionType)
[ec2:IsInterruptible](#list_ec2-ec2_IsInterruptible)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SourceCapacityReservationId](#list_ec2-ec2_SourceCapacityReservationId)
[ec2:TargetInstanceCount](#list_ec2-ec2_TargetInstanceCount)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Read
- ** [GetCoipPoolUsage](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetCoipPoolUsage.html) **
- **Description:** Grants permission to describe the allocations from the specified customer-owned address pool
- **Resource types (\*required):** [coip-pool\*](#list_ec2-resource-coip-pool)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetConsoleOutput](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetConsoleOutput.html) **
- **Description:** Grants permission to get the console output for an instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Read
- ** [GetConsoleScreenshot](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetConsoleScreenshot.html) **
- **Description:** Grants permission to retrieve a JPG-format screenshot of a running instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Read
- ** [GetDeclarativePoliciesReportSummary](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetDeclarativePoliciesReportSummary.html) **
- **Description:** Grants permission to get the report summary of declarative policies
- **Resource types (\*required):** [declarative-policies-report\*](#list_ec2-resource-declarative-policies-report)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetDefaultCreditSpecification](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetDefaultCreditSpecification.html) **
- **Description:** Grants permission to get the default credit option for CPU usage of a burstable performance instance family
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Read
- ** [GetEbsDefaultKmsKeyId](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetEbsDefaultKmsKeyId.html) **
- **Description:** Grants permission to get the ID of the default customer master key (CMK) for EBS encryption by default
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Read
- ** [GetEbsEncryptionByDefault](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetEbsEncryptionByDefault.html) **
- **Description:** Grants permission to describe whether EBS encryption by default is enabled for your account
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Read
- ** [GetEnabledIpamPolicy](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetEnabledIpamPolicy.html) **
- **Description:** Grants permission to describe the currently enabled policy in Amazon VPC IP Address Manager (IPAM)
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Read
- ** [GetFlowLogsIntegrationTemplate](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetFlowLogsIntegrationTemplate.html) **
- **Description:** Grants permission to generate a CloudFormation template to streamline the integration of VPC flow logs with Amazon Athena
- **Resource types (\*required):** [vpc-flow-log\*](#list_ec2-resource-vpc-flow-log)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetGroupsForCapacityReservation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetGroupsForCapacityReservation.html) **
- **Description:** Grants permission to list the resource groups to which a Capacity Reservation has been added
- **Resource types (\*required):** [capacity-reservation\*](#list_ec2-resource-capacity-reservation)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CapacityReservationFleet](#list_ec2-ec2_CapacityReservationFleet)
[ec2:CommitmentDuration](#list_ec2-ec2_CommitmentDuration)
[ec2:CreateDate](#list_ec2-ec2_CreateDate)
[ec2:DestinationCapacityReservationId](#list_ec2-ec2_DestinationCapacityReservationId)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:EndDate](#list_ec2-ec2_EndDate)
[ec2:EndDateType](#list_ec2-ec2_EndDateType)
[ec2:EphemeralStorage](#list_ec2-ec2_EphemeralStorage)
[ec2:InstanceCount](#list_ec2-ec2_InstanceCount)
[ec2:InstanceMatchCriteria](#list_ec2-ec2_InstanceMatchCriteria)
[ec2:InstancePlatform](#list_ec2-ec2_InstancePlatform)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:InterruptibleCapacityReservationId](#list_ec2-ec2_InterruptibleCapacityReservationId)
[ec2:InterruptionType](#list_ec2-ec2_InterruptionType)
[ec2:IsInterruptible](#list_ec2-ec2_IsInterruptible)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SourceCapacityReservationId](#list_ec2-ec2_SourceCapacityReservationId)
[ec2:TargetInstanceCount](#list_ec2-ec2_TargetInstanceCount)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** List
- ** [GetHostReservationPurchasePreview](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetHostReservationPurchasePreview.html) **
- **Description:** Grants permission to preview a reservation purchase with configurations that match those of a Dedicated Host
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Read
- ** [GetImageAncestry](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetImageAncestry.html) **
- **Description:** Grants permission to retrieve the ancestry chain of an AMI back to its root AMI
- **Resource types (\*required):** [image\*](#list_ec2-resource-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Access level:** Read
- ** [GetImageBlockPublicAccessState](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetImageBlockPublicAccessState.html) **
- **Description:** Grants permission to get the current state of block public access for AMIs at the account level in the specified Amazon Web Services Region
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Read
- ** [GetInstanceMetadataDefaults](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetInstanceMetadataDefaults.html) **
- **Description:** Grants permission to view the default instance metadata service (IMDS) settings set for your account in the specified Region
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [GetInstanceTpmEkPub](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetInstanceTpmEkPub.html) **
- **Description:** Grants permission to get the public endorsement key associated with the Nitro Trusted Platform Module (NitroTPM) for the specified instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Read
- ** [GetInstanceTypesFromInstanceRequirements](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetInstanceTypesFromInstanceRequirements.html) **
- **Description:** Grants permission to view a list of instance types with specified instance attributes
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [GetInstanceUefiData](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetInstanceUefiData.html) **
- **Description:** Grants permission to retrieve the binary representation of the UEFI variable store
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Read
- ** [GetIpamAddressHistory](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetIpamAddressHistory.html) **
- **Description:** Grants permission to retrieve historical information about a CIDR within an Amazon VPC IP Address Manager (IPAM) scope
- **Resource types (\*required):** [ipam-scope\*](#list_ec2-resource-ipam-scope)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetIpamDiscoveredAccounts](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetIpamDiscoveredAccounts.html) **
- **Description:** Grants permission to retrieve IPAM discovered accounts
- **Resource types (\*required):** [ipam-resource-discovery\*](#list_ec2-resource-ipam-resource-discovery)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetIpamDiscoveredPublicAddresses](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetIpamDiscoveredPublicAddresses.html) **
- **Description:** Grants permission to retrieve the public IP addresses that have been discovered by IPAM
- **Resource types (\*required):** [ipam-resource-discovery\*](#list_ec2-resource-ipam-resource-discovery)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetIpamDiscoveredResourceCidrs](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetIpamDiscoveredResourceCidrs.html) **
- **Description:** Grants permission to retrieve the resource CIDRs that are monitored as part of a resource discovery
- **Resource types (\*required):** [ipam-resource-discovery\*](#list_ec2-resource-ipam-resource-discovery)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetIpamPolicyAllocationRules](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetIpamPolicyAllocationRules.html) **
- **Description:** Grants permission to describe the rules that define how Amazon VPC IP Address Manager (IPAM) pools allocate IP addresses to Amazon resource types within an IPAM policy
- **Resource types (\*required):** [ipam-policy\*](#list_ec2-resource-ipam-policy)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** List
- ** [GetIpamPolicyOrganizationTargets](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetIpamPolicyOrganizationTargets.html) **
- **Description:** Grants permission to retrieve the Amazon Organizations targets associated with an Amazon VPC IP Address Manager (IPAM) policy
- **Resource types (\*required):** [ipam-policy\*](#list_ec2-resource-ipam-policy)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** List
- ** [GetIpamPoolAllocations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetIpamPoolAllocations.html) **
- **Description:** Grants permission to get a list of all the CIDR allocations in an Amazon VPC IP Address Manager (IPAM) pool
- **Resource types (\*required):** [ipam-pool\*](#list_ec2-resource-ipam-pool)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** List
- ** [GetIpamPoolCidrs](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetIpamPoolCidrs.html) **
- **Description:** Grants permission to get the CIDRs provisioned to an Amazon VPC IP Address Manager (IPAM) pool
- **Resource types (\*required):** [ipam-pool\*](#list_ec2-resource-ipam-pool)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetIpamPrefixListResolverRules](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetIpamPrefixListResolverRules.html) **
- **Description:** Grants permission to get rules for an IPAM prefix list resolver
- **Resource types (\*required):** [ipam-prefix-list-resolver\*](#list_ec2-resource-ipam-prefix-list-resolver)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetIpamPrefixListResolverVersionEntries](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetIpamPrefixListResolverVersionEntries.html) **
- **Description:** Grants permission to get CIDR entries for a specific version of an IPAM prefix list resolver
- **Resource types (\*required):** [ipam-prefix-list-resolver\*](#list_ec2-resource-ipam-prefix-list-resolver)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetIpamPrefixListResolverVersions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetIpamPrefixListResolverVersions.html) **
- **Description:** Grants permission to get versions of an IPAM prefix list resolver
- **Resource types (\*required):** [ipam-prefix-list-resolver\*](#list_ec2-resource-ipam-prefix-list-resolver)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetIpamResourceCidrs](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetIpamResourceCidrs.html) **
- **Description:** Grants permission to get information about the resources in an Amazon VPC IP Address Manager (IPAM) scope
- **Resource types (\*required):** [ipam-pool](#list_ec2-resource-ipam-pool) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-scope\*](#list_ec2-resource-ipam-scope) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetLaunchTemplateData](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetLaunchTemplateData.html) **
- **Description:** Grants permission to get the configuration data of the specified instance for use with a new launch template or launch template version
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Read
- ** [GetManagedPrefixListAssociations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetManagedPrefixListAssociations.html) **
- **Description:** Grants permission to get information about the resources that are associated with the specified managed prefix list
- **Resource types (\*required):** [prefix-list\*](#list_ec2-resource-prefix-list)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IpamPrefixListResolverTargetId](#list_ec2-ec2_IpamPrefixListResolverTargetId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetManagedPrefixListEntries](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetManagedPrefixListEntries.html) **
- **Description:** Grants permission to get information about the entries for a specified managed prefix list
- **Resource types (\*required):** [prefix-list\*](#list_ec2-resource-prefix-list)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IpamPrefixListResolverTargetId](#list_ec2-ec2_IpamPrefixListResolverTargetId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetManagedResourceVisibility](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetManagedResourceVisibility.html) **
- **Description:** Grants permission to retrieve the managed resource visibility configuration for the account
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [GetNetworkInsightsAccessScopeAnalysisFindings](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetNetworkInsightsAccessScopeAnalysisFindings.html) **
- **Description:** Grants permission to get the findings for one or more Network Access Scope analyses
- **Resource types (\*required):** [network-insights-access-scope-analysis\*](#list_ec2-resource-network-insights-access-scope-analysis)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetNetworkInsightsAccessScopeContent](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetNetworkInsightsAccessScopeContent.html) **
- **Description:** Grants permission to get the content for a specified Network Access Scope
- **Resource types (\*required):** [network-insights-access-scope\*](#list_ec2-resource-network-insights-access-scope)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetPasswordData](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetPasswordData.html) **
- **Description:** Grants permission to retrieve the encrypted administrator password for a running Windows instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Read
- ** [GetReservedInstancesExchangeQuote](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetReservedInstancesExchangeQuote.html) **
- **Description:** Grants permission to return a quote and exchange information for exchanging one or more Convertible Reserved Instances for a new Convertible Reserved Instance
- **Resource types (\*required):** [reserved-instances\*](#list_ec2-resource-reserved-instances)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ReservedInstancesOfferingType](#list_ec2-ec2_ReservedInstancesOfferingType)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Read
- ** [GetRouteServerAssociations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetRouteServerAssociations.html) **
- **Description:** Grants permission to get associations for a route server
- **Resource types (\*required):** [route-server\*](#list_ec2-resource-route-server)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetRouteServerPropagations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetRouteServerPropagations.html) **
- **Description:** Grants permission to get propagations for a route server
- **Resource types (\*required):** [route-server\*](#list_ec2-resource-route-server) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [route-table](#list_ec2-resource-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RouteTableID](#list_ec2-ec2_RouteTableID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Read
- ** [GetRouteServerRoutingDatabase](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetRouteServerRoutingDatabase.html) **
- **Description:** Grants permission to get the routing database for a route server
- **Resource types (\*required):** [route-server\*](#list_ec2-resource-route-server)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetSecurityGroupsForVpc](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetSecurityGroupsForVpc.html) **
- **Description:** Grants permission to retrieve a list of security groups for a specified VPC
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Read
- ** [GetSerialConsoleAccessStatus](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetSerialConsoleAccessStatus.html) **
- **Description:** Grants permission to retrieve the access status of your account to the EC2 serial console of all instances
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Read
- ** [GetSnapshotBlockPublicAccessState](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetSnapshotBlockPublicAccessState.html) **
- **Description:** Grants permission to retrieve the current state of the block public access for snapshots setting for a Region
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Read
- ** [GetSpotPlacementScores](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetSpotPlacementScores.html) **
- **Description:** Grants permission to calculate the Spot placement score for a Region or Availability Zone based on the specified target capacity and compute requirements
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Read
- ** [GetSubnetCidrReservations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetSubnetCidrReservations.html) **
- **Description:** Grants permission to retrieve information about the subnet CIDR reservations
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Read
- ** [GetTransitGatewayAttachmentPropagations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetTransitGatewayAttachmentPropagations.html) **
- **Description:** Grants permission to list the route tables to which a resource attachment propagates routes
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [GetTransitGatewayMeteringPolicyEntries](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetTransitGatewayMeteringPolicyEntries.html) **
- **Description:** Grants permission to list the entries for a transit gateway metering policy
- **Resource types (\*required):** [transit-gateway-metering-policy\*](#list_ec2-resource-transit-gateway-metering-policy)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMeteringPolicyId](#list_ec2-ec2_transitGatewayMeteringPolicyId)
- **Access level:** List
- ** [GetTransitGatewayMulticastDomainAssociations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetTransitGatewayMulticastDomainAssociations.html) **
- **Description:** Grants permission to get information about the associations for a transit gateway multicast domain
- **Resource types (\*required):** [transit-gateway-multicast-domain\*](#list_ec2-resource-transit-gateway-multicast-domain)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMulticastDomainId](#list_ec2-ec2_transitGatewayMulticastDomainId)
- **Access level:** List
- ** [GetTransitGatewayPolicyTableAssociations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetTransitGatewayPolicyTableAssociations.html) **
- **Description:** Grants permission to get information about associations for a transit gateway policy table
- **Resource types (\*required):** [transit-gateway-policy-table\*](#list_ec2-resource-transit-gateway-policy-table)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayPolicyTableId](#list_ec2-ec2_transitGatewayPolicyTableId)
- **Access level:** List
- ** [GetTransitGatewayPolicyTableEntries](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetTransitGatewayPolicyTableEntries.html) **
- **Description:** Grants permission to get information about associations for a transit gateway policy table entry
- **Resource types (\*required):** [transit-gateway-policy-table\*](#list_ec2-resource-transit-gateway-policy-table)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayPolicyTableId](#list_ec2-ec2_transitGatewayPolicyTableId)
- **Access level:** List
- ** [GetTransitGatewayPrefixListReferences](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetTransitGatewayPrefixListReferences.html) **
- **Description:** Grants permission to get information about prefix list references for a transit gateway route table
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [GetTransitGatewayRouteTableAssociations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetTransitGatewayRouteTableAssociations.html) **
- **Description:** Grants permission to get information about associations for a transit gateway route table
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [GetTransitGatewayRouteTablePropagations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetTransitGatewayRouteTablePropagations.html) **
- **Description:** Grants permission to get information about the route table propagations for a transit gateway route table
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [GetVerifiedAccessEndpointPolicy](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetVerifiedAccessEndpointPolicy.html) **
- **Description:** Grants permission to show the Verified Access policy associated with the endpoint
- **Resource types (\*required):** [verified-access-endpoint\*](#list_ec2-resource-verified-access-endpoint)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** List
- ** [GetVerifiedAccessEndpointTargets](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetVerifiedAccessEndpointTargets.html) **
- **Description:** Grants permission to get verified access endpoint targets
- **Resource types (\*required):** [verified-access-endpoint\*](#list_ec2-resource-verified-access-endpoint)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** List
- ** [GetVerifiedAccessGroupPolicy](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetVerifiedAccessGroupPolicy.html) **
- **Description:** Grants permission to show the contents of the Verified Access policy associated with the group
- **Resource types (\*required):** [verified-access-group\*](#list_ec2-resource-verified-access-group)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** List
- ** [GetVpcResourcesBlockingEncryptionEnforcement](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetVpcResourcesBlockingEncryptionEnforcement.html) **
- **Description:** Grants permission to describe resources that would block VPC Encryption Control enforcement
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** List
- ** [GetVpnConnectionDeviceSampleConfiguration](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetVpnConnectionDeviceSampleConfiguration.html) **
- **Description:** Grants permission to download an Amazon-provided sample configuration file to be used with the customer gateway device
- **Resource types (\*required):** [vpn-connection\*](#list_ec2-resource-vpn-connection) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthenticationType](#list_ec2-ec2_AuthenticationType)
[ec2:DPDTimeoutSeconds](#list_ec2-ec2_DPDTimeoutSeconds)
[ec2:GatewayType](#list_ec2-ec2_GatewayType)
[ec2:IKEVersions](#list_ec2-ec2_IKEVersions)
[ec2:InsideTunnelCidr](#list_ec2-ec2_InsideTunnelCidr)
[ec2:InsideTunnelIpv6Cidr](#list_ec2-ec2_InsideTunnelIpv6Cidr)
[ec2:Phase1DHGroup](#list_ec2-ec2_Phase1DHGroup)
[ec2:Phase1EncryptionAlgorithms](#list_ec2-ec2_Phase1EncryptionAlgorithms)
[ec2:Phase1IntegrityAlgorithms](#list_ec2-ec2_Phase1IntegrityAlgorithms)
[ec2:Phase1LifetimeSeconds](#list_ec2-ec2_Phase1LifetimeSeconds)
[ec2:Phase2DHGroup](#list_ec2-ec2_Phase2DHGroup)
[ec2:Phase2EncryptionAlgorithms](#list_ec2-ec2_Phase2EncryptionAlgorithms)
[ec2:Phase2IntegrityAlgorithms](#list_ec2-ec2_Phase2IntegrityAlgorithms)
[ec2:Phase2LifetimeSeconds](#list_ec2-ec2_Phase2LifetimeSeconds)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RekeyFuzzPercentage](#list_ec2-ec2_RekeyFuzzPercentage)
[ec2:RekeyMarginTimeSeconds](#list_ec2-ec2_RekeyMarginTimeSeconds)
[ec2:ReplayWindowSizePackets](#list_ec2-ec2_ReplayWindowSizePackets)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RoutingType](#list_ec2-ec2_RoutingType)
- **Resource types (\*required):** [vpn-connection-device-type\*](#list_ec2-resource-vpn-connection-device-type) / **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [GetVpnConnectionDeviceTypes](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetVpnConnectionDeviceTypes.html) **
- **Description:** Grants permission to obtain a list of customer gateway devices for which sample configuration files can be provided
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [GetVpnTunnelReplacementStatus](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_GetVpnTunnelReplacementStatus.html) **
- **Description:** Grants permission to view available tunnel endpoint maintenance events
- **Resource types (\*required):** [vpn-connection\*](#list_ec2-resource-vpn-connection)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthenticationType](#list_ec2-ec2_AuthenticationType)
[ec2:DPDTimeoutSeconds](#list_ec2-ec2_DPDTimeoutSeconds)
[ec2:GatewayType](#list_ec2-ec2_GatewayType)
[ec2:IKEVersions](#list_ec2-ec2_IKEVersions)
[ec2:InsideTunnelCidr](#list_ec2-ec2_InsideTunnelCidr)
[ec2:InsideTunnelIpv6Cidr](#list_ec2-ec2_InsideTunnelIpv6Cidr)
[ec2:Phase1DHGroup](#list_ec2-ec2_Phase1DHGroup)
[ec2:Phase1EncryptionAlgorithms](#list_ec2-ec2_Phase1EncryptionAlgorithms)
[ec2:Phase1IntegrityAlgorithms](#list_ec2-ec2_Phase1IntegrityAlgorithms)
[ec2:Phase1LifetimeSeconds](#list_ec2-ec2_Phase1LifetimeSeconds)
[ec2:Phase2DHGroup](#list_ec2-ec2_Phase2DHGroup)
[ec2:Phase2EncryptionAlgorithms](#list_ec2-ec2_Phase2EncryptionAlgorithms)
[ec2:Phase2IntegrityAlgorithms](#list_ec2-ec2_Phase2IntegrityAlgorithms)
[ec2:Phase2LifetimeSeconds](#list_ec2-ec2_Phase2LifetimeSeconds)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RekeyFuzzPercentage](#list_ec2-ec2_RekeyFuzzPercentage)
[ec2:RekeyMarginTimeSeconds](#list_ec2-ec2_RekeyMarginTimeSeconds)
[ec2:ReplayWindowSizePackets](#list_ec2-ec2_ReplayWindowSizePackets)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RoutingType](#list_ec2-ec2_RoutingType)
- **Access level:** List
- ** [ImportClientVpnClientCertificateRevocationList](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ImportClientVpnClientCertificateRevocationList.html) **
- **Description:** Grants permission to upload a client certificate revocation list to a Client VPN endpoint
- **Resource types (\*required):** [client-vpn-endpoint\*](#list_ec2-resource-client-vpn-endpoint)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ClientRootCertificateChainArn](#list_ec2-ec2_ClientRootCertificateChainArn)
[ec2:CloudwatchLogGroupArn](#list_ec2-ec2_CloudwatchLogGroupArn)
[ec2:CloudwatchLogStreamArn](#list_ec2-ec2_CloudwatchLogStreamArn)
[ec2:DirectoryArn](#list_ec2-ec2_DirectoryArn)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SamlProviderArn](#list_ec2-ec2_SamlProviderArn)
[ec2:ServerCertificateArn](#list_ec2-ec2_ServerCertificateArn)
- **Access level:** Write
- ** [ImportImage](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ImportImage.html) **
- **Description:** Grants permission to import single or multi-volume disk images or EBS snapshots into an Amazon Machine Image (AMI)
- **Resource types (\*required):** [image\*](#list_ec2-resource-image) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Resource types (\*required):** [import-image-task\*](#list_ec2-resource-import-image-task) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [snapshot](#list_ec2-resource-snapshot) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Access level:** Write
- ** [ImportInstance](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ImportInstance.html) **
- **Description:** Grants permission to create an import instance task using metadata from a disk image
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [security-group](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [volume\*](#list_ec2-resource-volume) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType)
- **Access level:** Write
- ** [ImportKeyPair](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ImportKeyPair.html) **
- **Description:** Grants permission to import a public key from an RSA key pair that was created with a third-party tool
- **Resource types (\*required):** [key-pair\*](#list_ec2-resource-key-pair)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KeyPairName](#list_ec2-ec2_KeyPairName)
[ec2:KeyPairType](#list_ec2-ec2_KeyPairType)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ImportSnapshot](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ImportSnapshot.html) **
- **Description:** Grants permission to import a disk into an EBS snapshot
- **Resource types (\*required):** [import-snapshot-task\*](#list_ec2-resource-import-snapshot-task) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [snapshot\*](#list_ec2-resource-snapshot) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Access level:** Write
- ** [ImportVolume](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ImportVolume.html) **
- **Description:** Grants permission to create an import volume task using metadata from a disk image
- **Resource types (\*required):** [volume\*](#list_ec2-resource-volume)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType)
- **Access level:** Write
- ** [ListImagesInRecycleBin](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ListImagesInRecycleBin.html) **
- **Description:** Grants permission to list Amazon Machine Images (AMIs) that are currently in the Recycle Bin
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [ListSnapshotsInRecycleBin](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ListSnapshotsInRecycleBin.html) **
- **Description:** Grants permission to list the Amazon EBS snapshots that are currently in the Recycle Bin
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [ListVolumesInRecycleBin](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ListVolumesInRecycleBin.html) **
- **Description:** Grants permission to list EBS volumes in Recycle Bin
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [LockSnapshot](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_LockSnapshot.html) **
- **Description:** Grants permission to lock an Amazon EBS snapshot in either governance or compliance mode to protect it against accidental or malicious deletions
- **Resource types (\*required):** [snapshot\*](#list_ec2-resource-snapshot)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Access level:** Write
- ** [ModifyAddressAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyAddressAttribute.html) **
- **Description:** Grants permission to modify an attribute of the specified Elastic IP address
- **Resource types (\*required):** [elastic-ip\*](#list_ec2-resource-elastic-ip)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AllocationId](#list_ec2-ec2_AllocationId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Domain](#list_ec2-ec2_Domain)
[ec2:PublicIpAddress](#list_ec2-ec2_PublicIpAddress)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyAvailabilityZoneGroup](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyAvailabilityZoneGroup.html) **
- **Description:** Grants permission to modify the opt-in status of the Local Zone and Wavelength Zone group for your account
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [ModifyCapacityReservation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyCapacityReservation.html) **
- **Description:** Grants permission to modify a Capacity Reservation's capacity and the conditions under which it is to be released
- **Resource types (\*required):** [capacity-reservation\*](#list_ec2-resource-capacity-reservation)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CapacityReservationFleet](#list_ec2-ec2_CapacityReservationFleet)
[ec2:CommitmentDuration](#list_ec2-ec2_CommitmentDuration)
[ec2:CreateDate](#list_ec2-ec2_CreateDate)
[ec2:DestinationCapacityReservationId](#list_ec2-ec2_DestinationCapacityReservationId)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:EndDate](#list_ec2-ec2_EndDate)
[ec2:EndDateType](#list_ec2-ec2_EndDateType)
[ec2:EphemeralStorage](#list_ec2-ec2_EphemeralStorage)
[ec2:InstanceCount](#list_ec2-ec2_InstanceCount)
[ec2:InstanceMatchCriteria](#list_ec2-ec2_InstanceMatchCriteria)
[ec2:InstancePlatform](#list_ec2-ec2_InstancePlatform)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:InterruptibleCapacityReservationId](#list_ec2-ec2_InterruptibleCapacityReservationId)
[ec2:InterruptionType](#list_ec2-ec2_InterruptionType)
[ec2:IsInterruptible](#list_ec2-ec2_IsInterruptible)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SourceCapacityReservationId](#list_ec2-ec2_SourceCapacityReservationId)
[ec2:TargetInstanceCount](#list_ec2-ec2_TargetInstanceCount)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [ModifyCapacityReservationFleet](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyCapacityReservationFleet.html) **
- **Description:** Grants permission to modify a Capacity Reservation Fleet
- **Resource types (\*required):** [capacity-reservation-fleet\*](#list_ec2-resource-capacity-reservation-fleet)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyClientVpnEndpoint](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyClientVpnEndpoint.html) **
- **Description:** Grants permission to modify a Client VPN endpoint
- **Resource types (\*required):** [client-vpn-endpoint\*](#list_ec2-resource-client-vpn-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ClientRootCertificateChainArn](#list_ec2-ec2_ClientRootCertificateChainArn)
[ec2:CloudwatchLogGroupArn](#list_ec2-ec2_CloudwatchLogGroupArn)
[ec2:CloudwatchLogStreamArn](#list_ec2-ec2_CloudwatchLogStreamArn)
[ec2:DirectoryArn](#list_ec2-ec2_DirectoryArn)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SamlProviderArn](#list_ec2-ec2_SamlProviderArn)
[ec2:ServerCertificateArn](#list_ec2-ec2_ServerCertificateArn)
- **Resource types (\*required):** [security-group](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [transit-gateway](#list_ec2-resource-transit-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayId](#list_ec2-ec2_transitGatewayId)
- **Resource types (\*required):** [vpc](#list_ec2-resource-vpc) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [ModifyDefaultCreditSpecification](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyDefaultCreditSpecification.html) **
- **Description:** Grants permission to change the account level default credit option for CPU usage of burstable performance instances
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [ModifyEbsDefaultKmsKeyId](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyEbsDefaultKmsKeyId.html) **
- **Description:** Grants permission to change the default customer master key (CMK) for EBS encryption by default for your account
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [ModifyFleet](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyFleet.html) **
- **Description:** Grants permission to modify an EC2 Fleet
- **Resource types (\*required):** [fleet\*](#list_ec2-resource-fleet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [image](#list_ec2-resource-image) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Resource types (\*required):** [launch-template](#list_ec2-resource-launch-template) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [ModifyFpgaImageAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyFpgaImageAttribute.html) **
- **Description:** Grants permission to modify an attribute of an Amazon FPGA Image (AFI)
- **Resource types (\*required):** [fpga-image\*](#list_ec2-resource-fpga-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyHosts](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyHosts.html) **
- **Description:** Grants permission to modify a Dedicated Host
- **Resource types (\*required):** [dedicated-host\*](#list_ec2-resource-dedicated-host)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AutoPlacement](#list_ec2-ec2_AutoPlacement)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:HostRecovery](#list_ec2-ec2_HostRecovery)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Quantity](#list_ec2-ec2_Quantity)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyIdFormat](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyIdFormat.html) **
- **Description:** Grants permission to modify the ID format for a resource
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [ModifyIdentityIdFormat](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyIdentityIdFormat.html) **
- **Description:** Grants permission to modify the ID format of a resource for a specific principal in your account
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [ModifyImageAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyImageAttribute.html) **
- **Description:** Grants permission to modify an attribute of an Amazon Machine Image (AMI)
- **Resource types (\*required):** [image\*](#list_ec2-resource-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Access level:** Write
- ** [ModifyInstanceAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyInstanceAttribute.html) **
- **Description:** Grants permission to modify an attribute of an instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [security-group](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [volume](#list_ec2-resource-volume) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType)
- **Access level:** Write
- ** [ModifyInstanceCapacityReservationAttributes](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyInstanceCapacityReservationAttributes.html) **
- **Description:** Grants permission to modify the Capacity Reservation settings for a stopped instance
- **Resource types (\*required):** [capacity-reservation](#list_ec2-resource-capacity-reservation) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CapacityReservationFleet](#list_ec2-ec2_CapacityReservationFleet)
[ec2:CommitmentDuration](#list_ec2-ec2_CommitmentDuration)
[ec2:CreateDate](#list_ec2-ec2_CreateDate)
[ec2:DestinationCapacityReservationId](#list_ec2-ec2_DestinationCapacityReservationId)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:EndDate](#list_ec2-ec2_EndDate)
[ec2:EndDateType](#list_ec2-ec2_EndDateType)
[ec2:EphemeralStorage](#list_ec2-ec2_EphemeralStorage)
[ec2:InstanceCount](#list_ec2-ec2_InstanceCount)
[ec2:InstanceMatchCriteria](#list_ec2-ec2_InstanceMatchCriteria)
[ec2:InstancePlatform](#list_ec2-ec2_InstancePlatform)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:InterruptibleCapacityReservationId](#list_ec2-ec2_InterruptibleCapacityReservationId)
[ec2:InterruptionType](#list_ec2-ec2_InterruptionType)
[ec2:IsInterruptible](#list_ec2-ec2_IsInterruptible)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SourceCapacityReservationId](#list_ec2-ec2_SourceCapacityReservationId)
[ec2:TargetInstanceCount](#list_ec2-ec2_TargetInstanceCount)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [ModifyInstanceConnectEndpoint](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyInstanceConnectEndpoint.html) **
- **Description:** Grants permission to modify an existing EC2 Instance Connect Endpoint
- **Resource types (\*required):** [instance-connect-endpoint\*](#list_ec2-resource-instance-connect-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
- **Resource types (\*required):** [security-group](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [ModifyInstanceCpuOptions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyInstanceCpuOptions.html) **
- **Description:** Grants permission to modify the CPU options on an instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [ModifyInstanceCreditSpecification](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyInstanceCreditSpecification.html) **
- **Description:** Grants permission to modify the credit option for CPU usage on an instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [ModifyInstanceEventStartTime](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyInstanceEventStartTime.html) **
- **Description:** Grants permission to modify the start time for a scheduled EC2 instance event
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [ModifyInstanceEventWindow](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyInstanceEventWindow.html) **
- **Description:** Grants permission to modify the specified event window
- **Resource types (\*required):** [instance-event-window\*](#list_ec2-resource-instance-event-window)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyInstanceMaintenanceOptions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyInstanceMaintenanceOptions.html) **
- **Description:** Grants permission to modify the recovery behaviour for an instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [ModifyInstanceMetadataDefaults](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyInstanceMetadataDefaults.html) **
- **Description:** Grants permission to modify the default instance metadata service (IMDS) settings for your account in the specified Region
- **Resource types (\*required):**
- **Condition keys:** [ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [ModifyInstanceMetadataOptions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyInstanceMetadataOptions.html) **
- **Description:** Grants permission to modify the metadata options for an instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [ModifyInstanceNetworkPerformanceOptions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyInstanceNetworkPerformanceOptions.html) **
- **Description:** Grants permission to modify the network performance options for an instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [ModifyInstancePlacement](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyInstancePlacement.html) **
- **Description:** Grants permission to modify the placement attributes for an instance
- **Resource types (\*required):** [dedicated-host](#list_ec2-resource-dedicated-host) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AutoPlacement](#list_ec2-ec2_AutoPlacement)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:HostRecovery](#list_ec2-ec2_HostRecovery)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Quantity](#list_ec2-ec2_Quantity)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [placement-group](#list_ec2-resource-placement-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:PlacementGroupName](#list_ec2-ec2_PlacementGroupName)
[ec2:PlacementGroupStrategy](#list_ec2-ec2_PlacementGroupStrategy)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyIpam](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyIpam.html) **
- **Description:** Grants permission to modify the configurations of an Amazon VPC IP Address Manager (IPAM)
- **Resource types (\*required):** [ipam\*](#list_ec2-resource-ipam)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyIpamPolicyAllocationRules](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyIpamPolicyAllocationRules.html) **
- **Description:** Grants permission to modify the rules that define how Amazon VPC IP Address Manager (IPAM) pools allocate IP addresses to Amazon resource types within an IPAM policy
- **Resource types (\*required):** [ipam-policy\*](#list_ec2-resource-ipam-policy) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-pool](#list_ec2-resource-ipam-pool) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyIpamPool](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyIpamPool.html) **
- **Description:** Grants permission to modify the configurations of an Amazon VPC IP Address Manager (IPAM) pool
- **Resource types (\*required):** [ipam-pool\*](#list_ec2-resource-ipam-pool)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyIpamPoolAllocation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyIpamPoolAllocation.html) **
- **Description:** Grants permission to modify the description of an IPAM pool allocation
- **Resource types (\*required):** [ipam-pool-allocation\*](#list_ec2-resource-ipam-pool-allocation)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyIpamPrefixListResolver](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyIpamPrefixListResolver.html) **
- **Description:** Grants permission to modify an IPAM prefix list resolver
- **Resource types (\*required):** [ipam-prefix-list-resolver\*](#list_ec2-resource-ipam-prefix-list-resolver) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-scope](#list_ec2-resource-ipam-scope) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyIpamPrefixListResolverTarget](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyIpamPrefixListResolverTarget.html) **
- **Description:** Grants permission to modify an IPAM prefix list resolver target
- **Resource types (\*required):** [ipam-prefix-list-resolver-target\*](#list_ec2-resource-ipam-prefix-list-resolver-target)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyIpamResourceCidr](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyIpamResourceCidr.html) **
- **Description:** Grants permission to modify the configurations of an Amazon VPC IP Address Manager (IPAM) resource CIDR
- **Resource types (\*required):** [ipam-scope\*](#list_ec2-resource-ipam-scope)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyIpamResourceDiscovery](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyIpamResourceDiscovery.html) **
- **Description:** Grants permission to modify a resource discovery
- **Resource types (\*required):** [ipam-resource-discovery\*](#list_ec2-resource-ipam-resource-discovery)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyIpamScope](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyIpamScope.html) **
- **Description:** Grants permission to modify the configurations of an Amazon VPC IP Address Manager (IPAM) scope
- **Resource types (\*required):** [ipam-scope\*](#list_ec2-resource-ipam-scope)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyLaunchTemplate](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyLaunchTemplate.html) **
- **Description:** Grants permission to modify a launch template
- **Resource types (\*required):** [launch-template\*](#list_ec2-resource-launch-template)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyLocalGatewayRoute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyLocalGatewayRoute.html) **
- **Description:** Grants permission to modify a local gateway route
- **Resource types (\*required):** [local-gateway-route-table\*](#list_ec2-resource-local-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [local-gateway-virtual-interface-group](#list_ec2-resource-local-gateway-virtual-interface-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [network-interface](#list_ec2-resource-network-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [prefix-list](#list_ec2-resource-prefix-list) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IpamPrefixListResolverTargetId](#list_ec2-ec2_IpamPrefixListResolverTargetId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyManagedPrefixList](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyManagedPrefixList.html) **
- **Description:** Grants permission to modify a managed prefix list
- **Resource types (\*required):** [prefix-list\*](#list_ec2-resource-prefix-list)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IpamPrefixListResolverTargetId](#list_ec2-ec2_IpamPrefixListResolverTargetId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyManagedResourceVisibility](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyManagedResourceVisibility.html) **
- **Description:** Grants permission to modify the managed resource visibility configuration for the account
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [ModifyNetworkInterfaceAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyNetworkInterfaceAttribute.html) **
- **Description:** Grants permission to modify an attribute of a network interface
- **Resource types (\*required):** [instance](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [network-interface\*](#list_ec2-resource-network-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [security-group](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [ModifyPrivateDnsNameOptions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyPrivateDnsNameOptions.html) **
- **Description:** Grants permission to modify the options for instance hostnames for the specified instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [ModifyPublicIpDnsNameOptions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyPublicIpDnsNameOptions.html) **
- **Description:** Grants permission to modify public hostname options for a network interface
- **Resource types (\*required):** [network-interface\*](#list_ec2-resource-network-interface)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [ModifyReservedInstances](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyReservedInstances.html) **
- **Description:** Grants permission to modify attributes of one or more Reserved Instances
- **Resource types (\*required):** [reserved-instances\*](#list_ec2-resource-reserved-instances)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ReservedInstancesOfferingType](#list_ec2-ec2_ReservedInstancesOfferingType)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [ModifyRouteServer](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyRouteServer.html) **
- **Description:** Grants permission to modify a route server
- **Resource types (\*required):** [route-server\*](#list_ec2-resource-route-server)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifySecurityGroupRules](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifySecurityGroupRules.html) **
- **Description:** Grants permission to modify the rules of a security group
- **Resource types (\*required):** [prefix-list](#list_ec2-resource-prefix-list) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IpamPrefixListResolverTargetId](#list_ec2-ec2_IpamPrefixListResolverTargetId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [security-group\*](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [security-group-rule\*](#list_ec2-resource-security-group-rule) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifySnapshotAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifySnapshotAttribute.html) **
- **Description:** Grants permission to add or remove permission settings for a snapshot
- **Resource types (\*required):** [snapshot\*](#list_ec2-resource-snapshot)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Access level:** Permissions management, Write
- ** [ModifySnapshotTier](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifySnapshotTier.html) **
- **Description:** Grants permission to archive Amazon EBS snapshots
- **Resource types (\*required):** [snapshot\*](#list_ec2-resource-snapshot)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Access level:** Write
- ** [ModifySpotFleetRequest](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifySpotFleetRequest.html) **
- **Description:** Grants permission to modify a Spot Fleet request
- **Resource types (\*required):** [launch-template](#list_ec2-resource-launch-template) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [spot-fleet-request\*](#list_ec2-resource-spot-fleet-request) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [ModifySubnetAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifySubnetAttribute.html) **
- **Description:** Grants permission to modify an attribute of a subnet
- **Resource types (\*required):** [subnet\*](#list_ec2-resource-subnet)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [ModifyTrafficMirrorFilterNetworkServices](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyTrafficMirrorFilterNetworkServices.html) **
- **Description:** Grants permission to allow or restrict mirroring network services
- **Resource types (\*required):** [traffic-mirror-filter\*](#list_ec2-resource-traffic-mirror-filter)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyTrafficMirrorFilterRule](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyTrafficMirrorFilterRule.html) **
- **Description:** Grants permission to modify a traffic mirror rule
- **Resource types (\*required):** [traffic-mirror-filter\*](#list_ec2-resource-traffic-mirror-filter) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [traffic-mirror-filter-rule\*](#list_ec2-resource-traffic-mirror-filter-rule) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyTrafficMirrorSession](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyTrafficMirrorSession.html) **
- **Description:** Grants permission to modify a traffic mirror session
- **Resource types (\*required):** [traffic-mirror-filter](#list_ec2-resource-traffic-mirror-filter) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [traffic-mirror-session\*](#list_ec2-resource-traffic-mirror-session) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [traffic-mirror-target](#list_ec2-resource-traffic-mirror-target) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyTransitGateway](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyTransitGateway.html) **
- **Description:** Grants permission to modify a transit gateway
- **Resource types (\*required):** [transit-gateway\*](#list_ec2-resource-transit-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayId](#list_ec2-ec2_transitGatewayId)
- **Resource types (\*required):** [transit-gateway-route-table](#list_ec2-resource-transit-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableId](#list_ec2-ec2_transitGatewayRouteTableId)
- **Access level:** Write
- ** [ModifyTransitGatewayMeteringPolicy](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyTransitGatewayMeteringPolicy.html) **
- **Description:** Grants permission to modify a transit gateway metering policy
- **Resource types (\*required):** [transit-gateway-attachment](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [transit-gateway-metering-policy\*](#list_ec2-resource-transit-gateway-metering-policy) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMeteringPolicyId](#list_ec2-ec2_transitGatewayMeteringPolicyId)
- **Access level:** Write
- ** [ModifyTransitGatewayPrefixListReference](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyTransitGatewayPrefixListReference.html) **
- **Description:** Grants permission to modify a transit gateway prefix list reference
- **Resource types (\*required):** [prefix-list\*](#list_ec2-resource-prefix-list) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IpamPrefixListResolverTargetId](#list_ec2-ec2_IpamPrefixListResolverTargetId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [transit-gateway-attachment](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [transit-gateway-route-table\*](#list_ec2-resource-transit-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableId](#list_ec2-ec2_transitGatewayRouteTableId)
- **Access level:** Write
- ** [ModifyTransitGatewayVpcAttachment](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyTransitGatewayVpcAttachment.html) **
- **Description:** Grants permission to modify a VPC attachment on a transit gateway
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [transit-gateway-attachment\*](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Access level:** Write
- ** [ModifyVerifiedAccessEndpoint](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVerifiedAccessEndpoint.html) **
- **Description:** Grants permission to modify the configuration of a Verified Access endpoint
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [verified-access-endpoint\*](#list_ec2-resource-verified-access-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [verified-access-group](#list_ec2-resource-verified-access-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyVerifiedAccessEndpointPolicy](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVerifiedAccessEndpointPolicy.html) **
- **Description:** Grants permission to modify the specified Verified Access endpoint policy
- **Resource types (\*required):** [verified-access-endpoint\*](#list_ec2-resource-verified-access-endpoint)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyVerifiedAccessGroup](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVerifiedAccessGroup.html) **
- **Description:** Grants permission to modify the specified Verified Access Group configuration
- **Resource types (\*required):** [verified-access-group\*](#list_ec2-resource-verified-access-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [verified-access-instance](#list_ec2-resource-verified-access-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyVerifiedAccessGroupPolicy](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVerifiedAccessGroupPolicy.html) **
- **Description:** Grants permission to modify the specified Verified Access group policy
- **Resource types (\*required):** [verified-access-group\*](#list_ec2-resource-verified-access-group)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyVerifiedAccessInstance](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVerifiedAccessInstance.html) **
- **Description:** Grants permission to modify the configuration of the specified Verified Access instance
- **Resource types (\*required):** [verified-access-instance\*](#list_ec2-resource-verified-access-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyVerifiedAccessInstanceLoggingConfiguration](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVerifiedAccessInstanceLoggingConfiguration.html) **
- **Description:** Grants permission to modify the logging configuration for the specified Verified Access instance
- **Resource types (\*required):** [verified-access-instance\*](#list_ec2-resource-verified-access-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyVerifiedAccessTrustProvider](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVerifiedAccessTrustProvider.html) **
- **Description:** Grants permission to modify the configuration of the specified Verified Access trust provider
- **Resource types (\*required):** [verified-access-trust-provider\*](#list_ec2-resource-verified-access-trust-provider)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyVolume](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVolume.html) **
- **Description:** Grants permission to modify the parameters of an EBS volume
- **Resource types (\*required):** [volume\*](#list_ec2-resource-volume)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType)
- **Access level:** Write
- ** [ModifyVolumeAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVolumeAttribute.html) **
- **Description:** Grants permission to modify an attribute of a volume
- **Resource types (\*required):** [volume\*](#list_ec2-resource-volume)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType)
- **Access level:** Write
- ** [ModifyVpcAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVpcAttribute.html) **
- **Description:** Grants permission to modify an attribute of a VPC
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [ModifyVpcBlockPublicAccessExclusion](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVpcBlockPublicAccessExclusion.html) **
- **Description:** Grants permission to modify an exclusion list for blocked public access on a VPC
- **Resource types (\*required):** [vpc-block-public-access-exclusion\*](#list_ec2-resource-vpc-block-public-access-exclusion)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyVpcBlockPublicAccessOptions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVpcBlockPublicAccessOptions.html) **
- **Description:** Grants permission to modify options for blocked public access on a VPC
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [ModifyVpcEncryptionControl](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVpcEncryptionControl.html) **
- **Description:** Grants permission to modify an existing VPC Encryption Control
- **Resource types (\*required):** [vpc-encryption-control\*](#list_ec2-resource-vpc-encryption-control)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ModifyVpcEndpoint](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVpcEndpoint.html) **
- **Description:** Grants permission to modify an attribute of a VPC endpoint
- **Resource types (\*required):** [route-table](#list_ec2-resource-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RouteTableID](#list_ec2-ec2_RouteTableID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [security-group](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [vpc-endpoint\*](#list_ec2-resource-vpc-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpcePrivateDnsPreference](#list_ec2-ec2_VpcePrivateDnsPreference)
[ec2:VpcePrivateDnsSpecifiedDomains](#list_ec2-ec2_VpcePrivateDnsSpecifiedDomains)
[ec2:VpceServiceName](#list_ec2-ec2_VpceServiceName)
[ec2:VpceServiceOwner](#list_ec2-ec2_VpceServiceOwner)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
- **Access level:** Write
- ** [ModifyVpcEndpointConnectionNotification](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVpcEndpointConnectionNotification.html) **
- **Description:** Grants permission to modify a connection notification for a VPC endpoint or VPC endpoint service
- **Resource types (\*required):** [vpc-endpoint](#list_ec2-resource-vpc-endpoint) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpcePrivateDnsPreference](#list_ec2-ec2_VpcePrivateDnsPreference)
[ec2:VpcePrivateDnsSpecifiedDomains](#list_ec2-ec2_VpcePrivateDnsSpecifiedDomains)
[ec2:VpceServiceName](#list_ec2-ec2_VpceServiceName)
[ec2:VpceServiceOwner](#list_ec2-ec2_VpceServiceOwner)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
- **Resource types (\*required):** [vpc-endpoint-service](#list_ec2-resource-vpc-endpoint-service) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpceServicePrivateDnsName](#list_ec2-ec2_VpceServicePrivateDnsName)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
[ec2:VpceSupportedRegion](#list_ec2-ec2_VpceSupportedRegion)
- **Access level:** Write
- ** [ModifyVpcEndpointServiceConfiguration](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVpcEndpointServiceConfiguration.html) **
- **Description:** Grants permission to modify the attributes of a VPC endpoint service configuration
- **Resource types (\*required):** [vpc-endpoint-service\*](#list_ec2-resource-vpc-endpoint-service)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpceServicePrivateDnsName](#list_ec2-ec2_VpceServicePrivateDnsName)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
[ec2:VpceSupportedRegion](#list_ec2-ec2_VpceSupportedRegion)
- **Access level:** Write
- ** [ModifyVpcEndpointServicePayerResponsibility](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVpcEndpointServicePayerResponsibility.html) **
- **Description:** Grants permission to modify the payer responsibility for a VPC endpoint service
- **Resource types (\*required):** [vpc-endpoint-service\*](#list_ec2-resource-vpc-endpoint-service)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpceServicePrivateDnsName](#list_ec2-ec2_VpceServicePrivateDnsName)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
[ec2:VpceSupportedRegion](#list_ec2-ec2_VpceSupportedRegion)
- **Access level:** Write
- ** [ModifyVpcEndpointServicePermissions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVpcEndpointServicePermissions.html) **
- **Description:** Grants permission to modify the permissions for a VPC endpoint service
- **Resource types (\*required):** [vpc-endpoint-service\*](#list_ec2-resource-vpc-endpoint-service)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpceServicePrivateDnsName](#list_ec2-ec2_VpceServicePrivateDnsName)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
[ec2:VpceSupportedRegion](#list_ec2-ec2_VpceSupportedRegion)
- **Access level:** Permissions management, Write
- ** [ModifyVpcPeeringConnectionOptions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVpcPeeringConnectionOptions.html) **
- **Description:** Grants permission to modify the VPC peering connection options on one side of a VPC peering connection
- **Resource types (\*required):** [vpc-peering-connection\*](#list_ec2-resource-vpc-peering-connection)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AccepterVpc](#list_ec2-ec2_AccepterVpc)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RequesterVpc](#list_ec2-ec2_RequesterVpc)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpcPeeringConnectionID](#list_ec2-ec2_VpcPeeringConnectionID)
- **Access level:** Write
- ** [ModifyVpcTenancy](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVpcTenancy.html) **
- **Description:** Grants permission to modify the instance tenancy attribute of a VPC
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Write
- ** [ModifyVpnConnection](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVpnConnection.html) **
- **Description:** Grants permission to modify the target gateway of a Site-to-Site VPN connection
- **Resource types (\*required):** [vpn-connection\*](#list_ec2-resource-vpn-connection)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthenticationType](#list_ec2-ec2_AuthenticationType)
[ec2:DPDTimeoutSeconds](#list_ec2-ec2_DPDTimeoutSeconds)
[ec2:GatewayType](#list_ec2-ec2_GatewayType)
[ec2:IKEVersions](#list_ec2-ec2_IKEVersions)
[ec2:InsideTunnelCidr](#list_ec2-ec2_InsideTunnelCidr)
[ec2:InsideTunnelIpv6Cidr](#list_ec2-ec2_InsideTunnelIpv6Cidr)
[ec2:Phase1DHGroup](#list_ec2-ec2_Phase1DHGroup)
[ec2:Phase1EncryptionAlgorithms](#list_ec2-ec2_Phase1EncryptionAlgorithms)
[ec2:Phase1IntegrityAlgorithms](#list_ec2-ec2_Phase1IntegrityAlgorithms)
[ec2:Phase1LifetimeSeconds](#list_ec2-ec2_Phase1LifetimeSeconds)
[ec2:Phase2DHGroup](#list_ec2-ec2_Phase2DHGroup)
[ec2:Phase2EncryptionAlgorithms](#list_ec2-ec2_Phase2EncryptionAlgorithms)
[ec2:Phase2IntegrityAlgorithms](#list_ec2-ec2_Phase2IntegrityAlgorithms)
[ec2:Phase2LifetimeSeconds](#list_ec2-ec2_Phase2LifetimeSeconds)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RekeyFuzzPercentage](#list_ec2-ec2_RekeyFuzzPercentage)
[ec2:RekeyMarginTimeSeconds](#list_ec2-ec2_RekeyMarginTimeSeconds)
[ec2:ReplayWindowSizePackets](#list_ec2-ec2_ReplayWindowSizePackets)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RoutingType](#list_ec2-ec2_RoutingType)
- **Access level:** Write
- ** [ModifyVpnConnectionOptions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVpnConnectionOptions.html) **
- **Description:** Grants permission to modify the connection options for your Site-to-Site VPN connection
- **Resource types (\*required):** [vpn-connection\*](#list_ec2-resource-vpn-connection)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthenticationType](#list_ec2-ec2_AuthenticationType)
[ec2:DPDTimeoutSeconds](#list_ec2-ec2_DPDTimeoutSeconds)
[ec2:GatewayType](#list_ec2-ec2_GatewayType)
[ec2:IKEVersions](#list_ec2-ec2_IKEVersions)
[ec2:InsideTunnelCidr](#list_ec2-ec2_InsideTunnelCidr)
[ec2:InsideTunnelIpv6Cidr](#list_ec2-ec2_InsideTunnelIpv6Cidr)
[ec2:Phase1DHGroup](#list_ec2-ec2_Phase1DHGroup)
[ec2:Phase1EncryptionAlgorithms](#list_ec2-ec2_Phase1EncryptionAlgorithms)
[ec2:Phase1IntegrityAlgorithms](#list_ec2-ec2_Phase1IntegrityAlgorithms)
[ec2:Phase1LifetimeSeconds](#list_ec2-ec2_Phase1LifetimeSeconds)
[ec2:Phase2DHGroup](#list_ec2-ec2_Phase2DHGroup)
[ec2:Phase2EncryptionAlgorithms](#list_ec2-ec2_Phase2EncryptionAlgorithms)
[ec2:Phase2IntegrityAlgorithms](#list_ec2-ec2_Phase2IntegrityAlgorithms)
[ec2:Phase2LifetimeSeconds](#list_ec2-ec2_Phase2LifetimeSeconds)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RekeyFuzzPercentage](#list_ec2-ec2_RekeyFuzzPercentage)
[ec2:RekeyMarginTimeSeconds](#list_ec2-ec2_RekeyMarginTimeSeconds)
[ec2:ReplayWindowSizePackets](#list_ec2-ec2_ReplayWindowSizePackets)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RoutingType](#list_ec2-ec2_RoutingType)
- **Access level:** Write
- ** [ModifyVpnTunnelCertificate](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVpnTunnelCertificate.html) **
- **Description:** Grants permission to modify the certificate for a Site-to-Site VPN connection
- **Resource types (\*required):** [vpn-connection\*](#list_ec2-resource-vpn-connection)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthenticationType](#list_ec2-ec2_AuthenticationType)
[ec2:DPDTimeoutSeconds](#list_ec2-ec2_DPDTimeoutSeconds)
[ec2:GatewayType](#list_ec2-ec2_GatewayType)
[ec2:IKEVersions](#list_ec2-ec2_IKEVersions)
[ec2:InsideTunnelCidr](#list_ec2-ec2_InsideTunnelCidr)
[ec2:InsideTunnelIpv6Cidr](#list_ec2-ec2_InsideTunnelIpv6Cidr)
[ec2:Phase1DHGroup](#list_ec2-ec2_Phase1DHGroup)
[ec2:Phase1EncryptionAlgorithms](#list_ec2-ec2_Phase1EncryptionAlgorithms)
[ec2:Phase1IntegrityAlgorithms](#list_ec2-ec2_Phase1IntegrityAlgorithms)
[ec2:Phase1LifetimeSeconds](#list_ec2-ec2_Phase1LifetimeSeconds)
[ec2:Phase2DHGroup](#list_ec2-ec2_Phase2DHGroup)
[ec2:Phase2EncryptionAlgorithms](#list_ec2-ec2_Phase2EncryptionAlgorithms)
[ec2:Phase2IntegrityAlgorithms](#list_ec2-ec2_Phase2IntegrityAlgorithms)
[ec2:Phase2LifetimeSeconds](#list_ec2-ec2_Phase2LifetimeSeconds)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RekeyFuzzPercentage](#list_ec2-ec2_RekeyFuzzPercentage)
[ec2:RekeyMarginTimeSeconds](#list_ec2-ec2_RekeyMarginTimeSeconds)
[ec2:ReplayWindowSizePackets](#list_ec2-ec2_ReplayWindowSizePackets)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RoutingType](#list_ec2-ec2_RoutingType)
- **Access level:** Write
- ** [ModifyVpnTunnelOptions](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyVpnTunnelOptions.html) **
- **Description:** Grants permission to modify the options for a Site-to-Site VPN connection
- **Resource types (\*required):** [vpn-connection\*](#list_ec2-resource-vpn-connection)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthenticationType](#list_ec2-ec2_AuthenticationType)
[ec2:DPDTimeoutSeconds](#list_ec2-ec2_DPDTimeoutSeconds)
[ec2:GatewayType](#list_ec2-ec2_GatewayType)
[ec2:IKEVersions](#list_ec2-ec2_IKEVersions)
[ec2:InsideTunnelCidr](#list_ec2-ec2_InsideTunnelCidr)
[ec2:InsideTunnelIpv6Cidr](#list_ec2-ec2_InsideTunnelIpv6Cidr)
[ec2:Phase1DHGroup](#list_ec2-ec2_Phase1DHGroup)
[ec2:Phase1EncryptionAlgorithms](#list_ec2-ec2_Phase1EncryptionAlgorithms)
[ec2:Phase1IntegrityAlgorithms](#list_ec2-ec2_Phase1IntegrityAlgorithms)
[ec2:Phase1LifetimeSeconds](#list_ec2-ec2_Phase1LifetimeSeconds)
[ec2:Phase2DHGroup](#list_ec2-ec2_Phase2DHGroup)
[ec2:Phase2EncryptionAlgorithms](#list_ec2-ec2_Phase2EncryptionAlgorithms)
[ec2:Phase2IntegrityAlgorithms](#list_ec2-ec2_Phase2IntegrityAlgorithms)
[ec2:Phase2LifetimeSeconds](#list_ec2-ec2_Phase2LifetimeSeconds)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RekeyFuzzPercentage](#list_ec2-ec2_RekeyFuzzPercentage)
[ec2:RekeyMarginTimeSeconds](#list_ec2-ec2_RekeyMarginTimeSeconds)
[ec2:ReplayWindowSizePackets](#list_ec2-ec2_ReplayWindowSizePackets)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RoutingType](#list_ec2-ec2_RoutingType)
- **Access level:** Write
- ** [MonitorInstances](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_MonitorInstances.html) **
- **Description:** Grants permission to enable detailed monitoring for a running instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [MoveAddressToVpc](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_MoveAddressToVpc.html) **
- **Description:** Grants permission to move an Elastic IP address from the EC2-Classic platform to the EC2-VPC platform
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [MoveByoipCidrToIpam](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_MoveByoipCidrToIpam.html) **
- **Description:** Grants permission to move a BYOIP IPv4 CIDR to Amazon VPC IP Address Manager (IPAM) from a public IPv4 pool
- **Resource types (\*required):** [ipam-pool\*](#list_ec2-resource-ipam-pool)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [MoveCapacityReservationInstances](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_MoveCapacityReservationInstances.html) **
- **Description:** Grants permission to move available capacity from a source Capacity Reservation to a destination Capacity Reservation
- **Resource types (\*required):** [capacity-reservation\*](#list_ec2-resource-capacity-reservation)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CapacityReservationFleet](#list_ec2-ec2_CapacityReservationFleet)
[ec2:CommitmentDuration](#list_ec2-ec2_CommitmentDuration)
[ec2:CreateDate](#list_ec2-ec2_CreateDate)
[ec2:DestinationCapacityReservationId](#list_ec2-ec2_DestinationCapacityReservationId)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:EndDate](#list_ec2-ec2_EndDate)
[ec2:EndDateType](#list_ec2-ec2_EndDateType)
[ec2:EphemeralStorage](#list_ec2-ec2_EphemeralStorage)
[ec2:InstanceCount](#list_ec2-ec2_InstanceCount)
[ec2:InstanceMatchCriteria](#list_ec2-ec2_InstanceMatchCriteria)
[ec2:InstancePlatform](#list_ec2-ec2_InstancePlatform)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:InterruptibleCapacityReservationId](#list_ec2-ec2_InterruptibleCapacityReservationId)
[ec2:InterruptionType](#list_ec2-ec2_InterruptionType)
[ec2:IsInterruptible](#list_ec2-ec2_IsInterruptible)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SourceCapacityReservationId](#list_ec2-ec2_SourceCapacityReservationId)
[ec2:TargetInstanceCount](#list_ec2-ec2_TargetInstanceCount)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [ProvisionByoipCidr](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ProvisionByoipCidr.html) **
- **Description:** Grants permission to provision an address range for use in Amazon through bring your own IP addresses (BYOIP), and to create a corresponding address pool
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [ProvisionIpamByoasn](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ProvisionIpamByoasn.html) **
- **Description:** Grants permission to provision an Autonomous System Number (ASN) for use in an Amazon Web Services account
- **Resource types (\*required):** [ipam\*](#list_ec2-resource-ipam)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ProvisionIpamPoolCidr](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ProvisionIpamPoolCidr.html) **
- **Description:** Grants permission to provision a CIDR to an Amazon VPC IP Address Manager (IPAM) pool
- **Resource types (\*required):** [ipam-external-resource-verification-token](#list_ec2-resource-ipam-external-resource-verification-token) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipam-pool\*](#list_ec2-resource-ipam-pool) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ProvisionPublicIpv4PoolCidr](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ProvisionPublicIpv4PoolCidr.html) **
- **Description:** Grants permission to provision a CIDR to a public IPv4 pool
- **Resource types (\*required):** [ipam-pool\*](#list_ec2-resource-ipam-pool) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipv4pool-ec2\*](#list_ec2-resource-ipv4pool-ec2) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [PurchaseCapacityBlock](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_PurchaseCapacityBlock.html) **
- **Description:** Grants permission to purchase a Capacity Block offering
- **Resource types (\*required):** [capacity-reservation\*](#list_ec2-resource-capacity-reservation)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CapacityReservationFleet](#list_ec2-ec2_CapacityReservationFleet)
[ec2:CommitmentDuration](#list_ec2-ec2_CommitmentDuration)
[ec2:CreateDate](#list_ec2-ec2_CreateDate)
[ec2:DestinationCapacityReservationId](#list_ec2-ec2_DestinationCapacityReservationId)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:EndDate](#list_ec2-ec2_EndDate)
[ec2:EndDateType](#list_ec2-ec2_EndDateType)
[ec2:EphemeralStorage](#list_ec2-ec2_EphemeralStorage)
[ec2:InstanceCount](#list_ec2-ec2_InstanceCount)
[ec2:InstanceMatchCriteria](#list_ec2-ec2_InstanceMatchCriteria)
[ec2:InstancePlatform](#list_ec2-ec2_InstancePlatform)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:InterruptibleCapacityReservationId](#list_ec2-ec2_InterruptibleCapacityReservationId)
[ec2:InterruptionType](#list_ec2-ec2_InterruptionType)
[ec2:IsInterruptible](#list_ec2-ec2_IsInterruptible)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SourceCapacityReservationId](#list_ec2-ec2_SourceCapacityReservationId)
[ec2:TargetInstanceCount](#list_ec2-ec2_TargetInstanceCount)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [PurchaseCapacityBlockExtension](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_PurchaseCapacityBlockExtension.html) **
- **Description:** Grants permission to purchase a Capacity Block extension
- **Resource types (\*required):** [capacity-reservation\*](#list_ec2-resource-capacity-reservation)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CapacityReservationFleet](#list_ec2-ec2_CapacityReservationFleet)
[ec2:CommitmentDuration](#list_ec2-ec2_CommitmentDuration)
[ec2:CreateDate](#list_ec2-ec2_CreateDate)
[ec2:DestinationCapacityReservationId](#list_ec2-ec2_DestinationCapacityReservationId)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:EndDate](#list_ec2-ec2_EndDate)
[ec2:EndDateType](#list_ec2-ec2_EndDateType)
[ec2:EphemeralStorage](#list_ec2-ec2_EphemeralStorage)
[ec2:InstanceCount](#list_ec2-ec2_InstanceCount)
[ec2:InstanceMatchCriteria](#list_ec2-ec2_InstanceMatchCriteria)
[ec2:InstancePlatform](#list_ec2-ec2_InstancePlatform)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:InterruptibleCapacityReservationId](#list_ec2-ec2_InterruptibleCapacityReservationId)
[ec2:InterruptionType](#list_ec2-ec2_InterruptionType)
[ec2:IsInterruptible](#list_ec2-ec2_IsInterruptible)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SourceCapacityReservationId](#list_ec2-ec2_SourceCapacityReservationId)
[ec2:TargetInstanceCount](#list_ec2-ec2_TargetInstanceCount)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [PurchaseHostReservation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_PurchaseHostReservation.html) **
- **Description:** Grants permission to purchase a reservation with configurations that match those of a Dedicated Host
- **Resource types (\*required):** [dedicated-host\*](#list_ec2-resource-dedicated-host)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AutoPlacement](#list_ec2-ec2_AutoPlacement)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:HostRecovery](#list_ec2-ec2_HostRecovery)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Quantity](#list_ec2-ec2_Quantity)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [PurchaseReservedInstancesOffering](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_PurchaseReservedInstancesOffering.html) **
- **Description:** Grants permission to purchase a Reserved Instance offering
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [PurchaseScheduledInstances](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_PurchaseScheduledInstances.html) **
- **Description:** Grants permission to purchase one or more Scheduled Instances with a specified schedule
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [RebootInstances](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RebootInstances.html) **
- **Description:** Grants permission to request a reboot of one or more instances
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [RegisterImage](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RegisterImage.html) **
- **Description:** Grants permission to register an Amazon Machine Image (AMI)
- **Resource types (\*required):** [image\*](#list_ec2-resource-image) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Resource types (\*required):** [snapshot](#list_ec2-resource-snapshot) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Access level:** Write
- ** [RegisterInstanceEventNotificationAttributes](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RegisterInstanceEventNotificationAttributes.html) **
- **Description:** Grants permission to add tags to the set of tags to include in notifications about scheduled events for your instances
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [RegisterTransitGatewayMulticastGroupMembers](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RegisterTransitGatewayMulticastGroupMembers.html) **
- **Description:** Grants permission to register one or more network interfaces as a member of a group IP address in a transit gateway multicast domain
- **Resource types (\*required):** [network-interface\*](#list_ec2-resource-network-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [transit-gateway-multicast-domain\*](#list_ec2-resource-transit-gateway-multicast-domain) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMulticastDomainId](#list_ec2-ec2_transitGatewayMulticastDomainId)
- **Access level:** Write
- ** [RegisterTransitGatewayMulticastGroupSources](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RegisterTransitGatewayMulticastGroupSources.html) **
- **Description:** Grants permission to register one or more network interfaces as a source of a group IP address in a transit gateway multicast domain
- **Resource types (\*required):** [network-interface\*](#list_ec2-resource-network-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [transit-gateway-multicast-domain\*](#list_ec2-resource-transit-gateway-multicast-domain) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMulticastDomainId](#list_ec2-ec2_transitGatewayMulticastDomainId)
- **Access level:** Write
- ** [RejectCapacityReservationBillingOwnership](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RejectCapacityReservationBillingOwnership.html) **
- **Description:** Grants permission to reject a request to assign billing of the available capacity of a shared Capacity Reservation to your account
- **Resource types (\*required):** [capacity-reservation\*](#list_ec2-resource-capacity-reservation)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CapacityReservationFleet](#list_ec2-ec2_CapacityReservationFleet)
[ec2:CommitmentDuration](#list_ec2-ec2_CommitmentDuration)
[ec2:CreateDate](#list_ec2-ec2_CreateDate)
[ec2:DestinationCapacityReservationId](#list_ec2-ec2_DestinationCapacityReservationId)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:EndDate](#list_ec2-ec2_EndDate)
[ec2:EndDateType](#list_ec2-ec2_EndDateType)
[ec2:EphemeralStorage](#list_ec2-ec2_EphemeralStorage)
[ec2:InstanceCount](#list_ec2-ec2_InstanceCount)
[ec2:InstanceMatchCriteria](#list_ec2-ec2_InstanceMatchCriteria)
[ec2:InstancePlatform](#list_ec2-ec2_InstancePlatform)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:InterruptibleCapacityReservationId](#list_ec2-ec2_InterruptibleCapacityReservationId)
[ec2:InterruptionType](#list_ec2-ec2_InterruptionType)
[ec2:IsInterruptible](#list_ec2-ec2_IsInterruptible)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SourceCapacityReservationId](#list_ec2-ec2_SourceCapacityReservationId)
[ec2:TargetInstanceCount](#list_ec2-ec2_TargetInstanceCount)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [RejectTransitGatewayClientVpnAttachment](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RejectTransitGatewayClientVpnAttachment.html) **
- **Description:** Grants permission to reject a transit gateway attachment request for a Client VPN endpoint
- **Resource types (\*required):** [transit-gateway-attachment\*](#list_ec2-resource-transit-gateway-attachment)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Access level:** Write
- ** [RejectTransitGatewayMulticastDomainAssociations](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RejectTransitGatewayMulticastDomainAssociations.html) **
- **Description:** Grants permission to reject requests to associate cross-account subnets with a transit gateway multicast domain
- **Resource types (\*required):** [transit-gateway-attachment](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [transit-gateway-multicast-domain](#list_ec2-resource-transit-gateway-multicast-domain) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMulticastDomainId](#list_ec2-ec2_transitGatewayMulticastDomainId)
- **Access level:** Write
- ** [RejectTransitGatewayPeeringAttachment](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RejectTransitGatewayPeeringAttachment.html) **
- **Description:** Grants permission to reject a transit gateway peering attachment request
- **Resource types (\*required):** [transit-gateway-attachment\*](#list_ec2-resource-transit-gateway-attachment)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Access level:** Write
- ** [RejectTransitGatewayVpcAttachment](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RejectTransitGatewayVpcAttachment.html) **
- **Description:** Grants permission to reject a request to attach a VPC to a transit gateway
- **Resource types (\*required):** [transit-gateway-attachment\*](#list_ec2-resource-transit-gateway-attachment)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Access level:** Write
- ** [RejectVpcEndpointConnections](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RejectVpcEndpointConnections.html) **
- **Description:** Grants permission to reject one or more VPC endpoint connection requests to a VPC endpoint service
- **Resource types (\*required):** [vpc-endpoint-service\*](#list_ec2-resource-vpc-endpoint-service)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpceServicePrivateDnsName](#list_ec2-ec2_VpceServicePrivateDnsName)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
[ec2:VpceSupportedRegion](#list_ec2-ec2_VpceSupportedRegion)
- **Access level:** Write
- ** [RejectVpcPeeringConnection](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RejectVpcPeeringConnection.html) **
- **Description:** Grants permission to reject a VPC peering connection request
- **Resource types (\*required):** [vpc-peering-connection\*](#list_ec2-resource-vpc-peering-connection)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AccepterVpc](#list_ec2-ec2_AccepterVpc)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RequesterVpc](#list_ec2-ec2_RequesterVpc)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpcPeeringConnectionID](#list_ec2-ec2_VpcPeeringConnectionID)
- **Access level:** Write
- ** [ReleaseAddress](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ReleaseAddress.html) **
- **Description:** Grants permission to release an Elastic IP address
- **Resource types (\*required):** [elastic-ip](#list_ec2-resource-elastic-ip)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AllocationId](#list_ec2-ec2_AllocationId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Domain](#list_ec2-ec2_Domain)
[ec2:PublicIpAddress](#list_ec2-ec2_PublicIpAddress)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ReleaseHosts](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ReleaseHosts.html) **
- **Description:** Grants permission to release one or more On-Demand Dedicated Hosts
- **Resource types (\*required):** [dedicated-host\*](#list_ec2-resource-dedicated-host)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AutoPlacement](#list_ec2-ec2_AutoPlacement)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:HostRecovery](#list_ec2-ec2_HostRecovery)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Quantity](#list_ec2-ec2_Quantity)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ReleaseIpamPoolAllocation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ReleaseIpamPoolAllocation.html) **
- **Description:** Grants permission to release an allocation within an Amazon VPC IP Address Manager (IPAM) pool
- **Resource types (\*required):** [ipam-pool\*](#list_ec2-resource-ipam-pool)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ReplaceIamInstanceProfileAssociation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ReplaceIamInstanceProfileAssociation.html) **
- **Description:** Grants permission to replace an IAM instance profile for an instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [ReplaceImageCriteriaInAllowedImagesSettings](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ReplaceImageCriteriaInAllowedImagesSettings.html) **
- **Description:** Grants permission to replace image criteria in allowed images settings
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [ReplaceNetworkAclAssociation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ReplaceNetworkAclAssociation.html) **
- **Description:** Grants permission to change which network ACL a subnet is associated with
- **Resource types (\*required):** [network-acl\*](#list_ec2-resource-network-acl) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:NetworkAclID](#list_ec2-ec2_NetworkAclID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [subnet\*](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [ReplaceNetworkAclEntry](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ReplaceNetworkAclEntry.html) **
- **Description:** Grants permission to replace an entry (rule) in a network ACL
- **Resource types (\*required):** [network-acl\*](#list_ec2-resource-network-acl)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:NetworkAclID](#list_ec2-ec2_NetworkAclID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [ReplaceRoute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ReplaceRoute.html) **
- **Description:** Grants permission to replace a route within a route table in a VPC
- **Resource types (\*required):** [instance](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [route-table\*](#list_ec2-resource-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RouteTableID](#list_ec2-ec2_RouteTableID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [ReplaceRouteTableAssociation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ReplaceRouteTableAssociation.html) **
- **Description:** Grants permission to change the route table that is associated with a subnet
- **Resource types (\*required):** [internet-gateway](#list_ec2-resource-internet-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:InternetGatewayID](#list_ec2-ec2_InternetGatewayID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipv4pool-ec2](#list_ec2-resource-ipv4pool-ec2) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [ipv6pool-ec2](#list_ec2-resource-ipv6pool-ec2) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [route-table\*](#list_ec2-resource-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RouteTableID](#list_ec2-ec2_RouteTableID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [vpn-gateway](#list_ec2-resource-vpn-gateway) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ReplaceTransitGatewayRoute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ReplaceTransitGatewayRoute.html) **
- **Description:** Grants permission to replace a route in a transit gateway route table
- **Resource types (\*required):** [transit-gateway-attachment](#list_ec2-resource-transit-gateway-attachment) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId)
- **Resource types (\*required):** [transit-gateway-route-table\*](#list_ec2-resource-transit-gateway-route-table) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableId](#list_ec2-ec2_transitGatewayRouteTableId)
- **Access level:** Write
- ** [ReplaceVpnTunnel](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ReplaceVpnTunnel.html) **
- **Description:** Grants permission to replace a VPN tunnel
- **Resource types (\*required):** [vpn-connection\*](#list_ec2-resource-vpn-connection)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthenticationType](#list_ec2-ec2_AuthenticationType)
[ec2:DPDTimeoutSeconds](#list_ec2-ec2_DPDTimeoutSeconds)
[ec2:GatewayType](#list_ec2-ec2_GatewayType)
[ec2:IKEVersions](#list_ec2-ec2_IKEVersions)
[ec2:InsideTunnelCidr](#list_ec2-ec2_InsideTunnelCidr)
[ec2:InsideTunnelIpv6Cidr](#list_ec2-ec2_InsideTunnelIpv6Cidr)
[ec2:Phase1DHGroup](#list_ec2-ec2_Phase1DHGroup)
[ec2:Phase1EncryptionAlgorithms](#list_ec2-ec2_Phase1EncryptionAlgorithms)
[ec2:Phase1IntegrityAlgorithms](#list_ec2-ec2_Phase1IntegrityAlgorithms)
[ec2:Phase1LifetimeSeconds](#list_ec2-ec2_Phase1LifetimeSeconds)
[ec2:Phase2DHGroup](#list_ec2-ec2_Phase2DHGroup)
[ec2:Phase2EncryptionAlgorithms](#list_ec2-ec2_Phase2EncryptionAlgorithms)
[ec2:Phase2IntegrityAlgorithms](#list_ec2-ec2_Phase2IntegrityAlgorithms)
[ec2:Phase2LifetimeSeconds](#list_ec2-ec2_Phase2LifetimeSeconds)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RekeyFuzzPercentage](#list_ec2-ec2_RekeyFuzzPercentage)
[ec2:RekeyMarginTimeSeconds](#list_ec2-ec2_RekeyMarginTimeSeconds)
[ec2:ReplayWindowSizePackets](#list_ec2-ec2_ReplayWindowSizePackets)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RoutingType](#list_ec2-ec2_RoutingType)
- **Access level:** Write
- ** [ReportInstanceStatus](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ReportInstanceStatus.html) **
- **Description:** Grants permission to submit feedback about the status of an instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [RequestSpotFleet](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RequestSpotFleet.html) **
- **Description:** Grants permission to create a Spot Fleet request
- **Resource types (\*required):** [image](#list_ec2-resource-image) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Resource types (\*required):** [key-pair](#list_ec2-resource-key-pair) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KeyPairName](#list_ec2-ec2_KeyPairName)
[ec2:KeyPairType](#list_ec2-ec2_KeyPairType)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [launch-template](#list_ec2-resource-launch-template) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [placement-group](#list_ec2-resource-placement-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:PlacementGroupName](#list_ec2-ec2_PlacementGroupName)
[ec2:PlacementGroupStrategy](#list_ec2-ec2_PlacementGroupStrategy)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [security-group](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [snapshot](#list_ec2-resource-snapshot) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Resource types (\*required):** [spot-fleet-request\*](#list_ec2-resource-spot-fleet-request) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [RequestSpotInstances](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RequestSpotInstances.html) **
- **Description:** Grants permission to create a Spot Instance request
- **Resource types (\*required):** [image](#list_ec2-resource-image) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Resource types (\*required):** [key-pair](#list_ec2-resource-key-pair) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KeyPairName](#list_ec2-ec2_KeyPairName)
[ec2:KeyPairType](#list_ec2-ec2_KeyPairType)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [network-interface](#list_ec2-resource-network-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [placement-group](#list_ec2-resource-placement-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:PlacementGroupName](#list_ec2-ec2_PlacementGroupName)
[ec2:PlacementGroupStrategy](#list_ec2-ec2_PlacementGroupStrategy)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [security-group](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [snapshot](#list_ec2-resource-snapshot) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Resource types (\*required):** [spot-instances-request\*](#list_ec2-resource-spot-instances-request) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [subnet](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [ResetAddressAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ResetAddressAttribute.html) **
- **Description:** Grants permission to reset the attribute of the specified IP address
- **Resource types (\*required):** [elastic-ip\*](#list_ec2-resource-elastic-ip)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AllocationId](#list_ec2-ec2_AllocationId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Domain](#list_ec2-ec2_Domain)
[ec2:PublicIpAddress](#list_ec2-ec2_PublicIpAddress)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ResetEbsDefaultKmsKeyId](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ResetEbsDefaultKmsKeyId.html) **
- **Description:** Grants permission to reset the default customer master key (CMK) for EBS encryption for your account to use the Amazon-managed CMK for EBS
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [ResetFpgaImageAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ResetFpgaImageAttribute.html) **
- **Description:** Grants permission to reset an attribute of an Amazon FPGA Image (AFI) to its default value
- **Resource types (\*required):** [fpga-image\*](#list_ec2-resource-fpga-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [ResetImageAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ResetImageAttribute.html) **
- **Description:** Grants permission to reset an attribute of an Amazon Machine Image (AMI) to its default value
- **Resource types (\*required):** [image\*](#list_ec2-resource-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Access level:** Write
- ** [ResetInstanceAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ResetInstanceAttribute.html) **
- **Description:** Grants permission to reset an attribute of an instance to its default value
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [ResetNetworkInterfaceAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ResetNetworkInterfaceAttribute.html) **
- **Description:** Grants permission to reset an attribute of a network interface
- **Resource types (\*required):** [network-interface\*](#list_ec2-resource-network-interface)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [ResetSnapshotAttribute](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ResetSnapshotAttribute.html) **
- **Description:** Grants permission to reset permission settings for a snapshot
- **Resource types (\*required):** [snapshot\*](#list_ec2-resource-snapshot)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Access level:** Permissions management, Write
- ** [RestoreAddressToClassic](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RestoreAddressToClassic.html) **
- **Description:** Grants permission to restore an Elastic IP address that was previously moved to the EC2-VPC platform back to the EC2-Classic platform
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [RestoreImageFromRecycleBin](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RestoreImageFromRecycleBin.html) **
- **Description:** Grants permission to restore an Amazon Machine Image (AMI) from the Recycle Bin
- **Resource types (\*required):** [image\*](#list_ec2-resource-image)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Access level:** Write
- ** [RestoreManagedPrefixListVersion](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RestoreManagedPrefixListVersion.html) **
- **Description:** Grants permission to restore the entries from a previous version of a managed prefix list to a new version of the prefix list
- **Resource types (\*required):** [prefix-list\*](#list_ec2-resource-prefix-list)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IpamPrefixListResolverTargetId](#list_ec2-ec2_IpamPrefixListResolverTargetId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [RestoreSnapshotFromRecycleBin](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RestoreSnapshotFromRecycleBin.html) **
- **Description:** Grants permission to restore an Amazon EBS snapshot from the Recycle Bin
- **Resource types (\*required):** [snapshot\*](#list_ec2-resource-snapshot)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Access level:** Write
- ** [RestoreSnapshotTier](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RestoreSnapshotTier.html) **
- **Description:** Grants permission to restore an archived Amazon EBS snapshot for use temporarily or permanently, or modify the restore period or restore type for a snapshot that was previously temporarily restored
- **Resource types (\*required):** [snapshot\*](#list_ec2-resource-snapshot)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Access level:** Write
- ** [RestoreVolumeFromRecycleBin](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RestoreVolumeFromRecycleBin.html) **
- **Description:** Grants permission to restore an EBS volume from Recycle Bin
- **Resource types (\*required):** [volume\*](#list_ec2-resource-volume)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType)
- **Access level:** Write
- ** [RevokeClientVpnIngress](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RevokeClientVpnIngress.html) **
- **Description:** Grants permission to remove an inbound authorization rule from a Client VPN endpoint
- **Resource types (\*required):** [client-vpn-endpoint\*](#list_ec2-resource-client-vpn-endpoint)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ClientRootCertificateChainArn](#list_ec2-ec2_ClientRootCertificateChainArn)
[ec2:CloudwatchLogGroupArn](#list_ec2-ec2_CloudwatchLogGroupArn)
[ec2:CloudwatchLogStreamArn](#list_ec2-ec2_CloudwatchLogStreamArn)
[ec2:DirectoryArn](#list_ec2-ec2_DirectoryArn)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SamlProviderArn](#list_ec2-ec2_SamlProviderArn)
[ec2:ServerCertificateArn](#list_ec2-ec2_ServerCertificateArn)
- **Access level:** Write
- ** [RevokeSecurityGroupEgress](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RevokeSecurityGroupEgress.html) **
- **Description:** Grants permission to remove one or more outbound rules from a VPC security group
- **Resource types (\*required):** [security-group\*](#list_ec2-resource-security-group)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [RevokeSecurityGroupIngress](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RevokeSecurityGroupIngress.html) **
- **Description:** Grants permission to remove one or more inbound rules from a security group
- **Resource types (\*required):** [security-group\*](#list_ec2-resource-security-group)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [RunInstances](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RunInstances.html) **
- **Description:** Grants permission to launch one or more instances / **Resource types (\*required):** [capacity-reservation](#list_ec2-resource-capacity-reservation) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CapacityReservationFleet](#list_ec2-ec2_CapacityReservationFleet)
[ec2:CommitmentDuration](#list_ec2-ec2_CommitmentDuration)
[ec2:CreateDate](#list_ec2-ec2_CreateDate)
[ec2:DestinationCapacityReservationId](#list_ec2-ec2_DestinationCapacityReservationId)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:EndDate](#list_ec2-ec2_EndDate)
[ec2:EndDateType](#list_ec2-ec2_EndDateType)
[ec2:EphemeralStorage](#list_ec2-ec2_EphemeralStorage)
[ec2:InstanceCount](#list_ec2-ec2_InstanceCount)
[ec2:InstanceMatchCriteria](#list_ec2-ec2_InstanceMatchCriteria)
[ec2:InstancePlatform](#list_ec2-ec2_InstancePlatform)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:InterruptibleCapacityReservationId](#list_ec2-ec2_InterruptibleCapacityReservationId)
[ec2:InterruptionType](#list_ec2-ec2_InterruptionType)
[ec2:IsInterruptible](#list_ec2-ec2_IsInterruptible)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SourceCapacityReservationId](#list_ec2-ec2_SourceCapacityReservationId)
[ec2:TargetInstanceCount](#list_ec2-ec2_TargetInstanceCount)
[ec2:Tenancy](#list_ec2-ec2_Tenancy) / **Access level:** Write
- **Resource types (\*required):** [elastic-gpu](#list_ec2-resource-elastic-gpu) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:ElasticGpuType](#list_ec2-ec2_ElasticGpuType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [elastic-inference](#list_ec2-resource-elastic-inference) / **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Resource types (\*required):** [group](#list_ec2-resource-group) / **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Resource types (\*required):** [image\*](#list_ec2-resource-image) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [key-pair](#list_ec2-resource-key-pair) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KeyPairName](#list_ec2-ec2_KeyPairName)
[ec2:KeyPairType](#list_ec2-ec2_KeyPairType)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [launch-template](#list_ec2-resource-launch-template) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [license-configuration](#list_ec2-resource-license-configuration) / **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Resource types (\*required):** [network-interface\*](#list_ec2-resource-network-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [placement-group](#list_ec2-resource-placement-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:PlacementGroupName](#list_ec2-ec2_PlacementGroupName)
[ec2:PlacementGroupStrategy](#list_ec2-ec2_PlacementGroupStrategy)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [secondary-interface](#list_ec2-resource-secondary-interface) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [secondary-subnet](#list_ec2-resource-secondary-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [security-group\*](#list_ec2-resource-security-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [snapshot](#list_ec2-resource-snapshot) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Resource types (\*required):** [spot-instances-request](#list_ec2-resource-spot-instances-request) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [subnet\*](#list_ec2-resource-subnet) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Resource types (\*required):** [volume](#list_ec2-resource-volume) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType)
- **Description:** **SCENARIO: **EC2-Classic-EBS / **Resource types (\*required):** [image\*](#list_ec2-resource-image)
[instance\*](#list_ec2-resource-instance)
[security-group\*](#list_ec2-resource-security-group)
[volume\*](#list_ec2-resource-volume)
[key-pair](#list_ec2-resource-key-pair)
[placement-group](#list_ec2-resource-placement-group)
[snapshot](#list_ec2-resource-snapshot) / **Condition keys:** / **Access level:**
- **Description:** **SCENARIO: **EC2-Classic-InstanceStore / **Resource types (\*required):** [image\*](#list_ec2-resource-image)
[instance\*](#list_ec2-resource-instance)
[security-group\*](#list_ec2-resource-security-group)
[key-pair](#list_ec2-resource-key-pair)
[placement-group](#list_ec2-resource-placement-group)
[snapshot](#list_ec2-resource-snapshot) / **Condition keys:** / **Access level:**
- **Description:** **SCENARIO: **EC2-VPC-EBS / **Resource types (\*required):** [image\*](#list_ec2-resource-image)
[instance\*](#list_ec2-resource-instance)
[network-interface\*](#list_ec2-resource-network-interface)
[security-group\*](#list_ec2-resource-security-group)
[volume\*](#list_ec2-resource-volume)
[key-pair](#list_ec2-resource-key-pair)
[placement-group](#list_ec2-resource-placement-group)
[snapshot](#list_ec2-resource-snapshot) / **Condition keys:** / **Access level:**
- **Description:** **SCENARIO: **EC2-VPC-EBS-Subnet / **Resource types (\*required):** [image\*](#list_ec2-resource-image)
[instance\*](#list_ec2-resource-instance)
[network-interface\*](#list_ec2-resource-network-interface)
[security-group\*](#list_ec2-resource-security-group)
[subnet\*](#list_ec2-resource-subnet)
[volume\*](#list_ec2-resource-volume)
[key-pair](#list_ec2-resource-key-pair)
[placement-group](#list_ec2-resource-placement-group)
[snapshot](#list_ec2-resource-snapshot) / **Condition keys:** / **Access level:**
- **Description:** **SCENARIO: **EC2-VPC-InstanceStore / **Resource types (\*required):** [image\*](#list_ec2-resource-image)
[instance\*](#list_ec2-resource-instance)
[network-interface\*](#list_ec2-resource-network-interface)
[security-group\*](#list_ec2-resource-security-group)
[key-pair](#list_ec2-resource-key-pair)
[placement-group](#list_ec2-resource-placement-group)
[snapshot](#list_ec2-resource-snapshot) / **Condition keys:** / **Access level:**
- **Description:** **SCENARIO: **EC2-VPC-InstanceStore-Subnet / **Resource types (\*required):** [image\*](#list_ec2-resource-image)
[instance\*](#list_ec2-resource-instance)
[network-interface\*](#list_ec2-resource-network-interface)
[security-group\*](#list_ec2-resource-security-group)
[subnet\*](#list_ec2-resource-subnet)
[key-pair](#list_ec2-resource-key-pair)
[placement-group](#list_ec2-resource-placement-group)
[snapshot](#list_ec2-resource-snapshot) / **Condition keys:** / **Access level:**
- ** [RunScheduledInstances](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_RunScheduledInstances.html) **
- **Description:** Grants permission to launch one or more Scheduled Instances
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [SearchLocalGatewayRoutes](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_SearchLocalGatewayRoutes.html) **
- **Description:** Grants permission to search for routes in a local gateway route table
- **Resource types (\*required):** [local-gateway-route-table\*](#list_ec2-resource-local-gateway-route-table)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** List
- ** [SearchTransitGatewayMulticastGroups](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_SearchTransitGatewayMulticastGroups.html) **
- **Description:** Grants permission to search for groups, sources, and members in a transit gateway multicast domain
- **Resource types (\*required):** [transit-gateway-multicast-domain\*](#list_ec2-resource-transit-gateway-multicast-domain)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMulticastDomainId](#list_ec2-ec2_transitGatewayMulticastDomainId)
- **Access level:** List
- ** [SearchTransitGatewayRoutes](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_SearchTransitGatewayRoutes.html) **
- **Description:** Grants permission to search for routes in a transit gateway route table
- **Resource types (\*required):** [transit-gateway-route-table\*](#list_ec2-resource-transit-gateway-route-table)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableId](#list_ec2-ec2_transitGatewayRouteTableId)
- **Access level:** List
- ** [SendDiagnosticInterrupt](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_SendDiagnosticInterrupt.html) **
- **Description:** Grants permission to send a diagnostic interrupt to an Amazon EC2 instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [StartDeclarativePoliciesReport](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_StartDeclarativePoliciesReport.html) **
- **Description:** Grants permission to start a declarative policies report
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Read
- ** [StartInstances](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_StartInstances.html) **
- **Description:** Grants permission to start a stopped instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [license-configuration](#list_ec2-resource-license-configuration) / **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [StartNetworkInsightsAccessScopeAnalysis](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_StartNetworkInsightsAccessScopeAnalysis.html) **
- **Description:** Grants permission to start a Network Access Scope analysis
- **Resource types (\*required):** [network-insights-access-scope\*](#list_ec2-resource-network-insights-access-scope) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [network-insights-access-scope-analysis\*](#list_ec2-resource-network-insights-access-scope-analysis) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [StartNetworkInsightsAnalysis](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_StartNetworkInsightsAnalysis.html) **
- **Description:** Grants permission to start analyzing a specified path
- **Resource types (\*required):** [network-insights-analysis\*](#list_ec2-resource-network-insights-analysis) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [network-insights-path\*](#list_ec2-resource-network-insights-path) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [StartVpcEndpointServicePrivateDnsVerification](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_StartVpcEndpointServicePrivateDnsVerification.html) **
- **Description:** Grants permission to start the private DNS verification process for a VPC endpoint service
- **Resource types (\*required):** [vpc-endpoint-service\*](#list_ec2-resource-vpc-endpoint-service)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpceServicePrivateDnsName](#list_ec2-ec2_VpceServicePrivateDnsName)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
[ec2:VpceSupportedRegion](#list_ec2-ec2_VpceSupportedRegion)
- **Access level:** Write
- ** [StopInstances](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_StopInstances.html) **
- **Description:** Grants permission to stop an Amazon EBS-backed instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [TerminateClientVpnConnections](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_TerminateClientVpnConnections.html) **
- **Description:** Grants permission to terminate active Client VPN endpoint connections
- **Resource types (\*required):** [client-vpn-endpoint\*](#list_ec2-resource-client-vpn-endpoint)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ClientRootCertificateChainArn](#list_ec2-ec2_ClientRootCertificateChainArn)
[ec2:CloudwatchLogGroupArn](#list_ec2-ec2_CloudwatchLogGroupArn)
[ec2:CloudwatchLogStreamArn](#list_ec2-ec2_CloudwatchLogStreamArn)
[ec2:DirectoryArn](#list_ec2-ec2_DirectoryArn)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SamlProviderArn](#list_ec2-ec2_SamlProviderArn)
[ec2:ServerCertificateArn](#list_ec2-ec2_ServerCertificateArn)
- **Access level:** Write
- ** [TerminateInstances](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_TerminateInstances.html) **
- **Description:** Grants permission to shut down one or more instances
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [UnassignIpv6Addresses](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_UnassignIpv6Addresses.html) **
- **Description:** Grants permission to unassign one or more IPv6 addresses from a network interface
- **Resource types (\*required):** [network-interface\*](#list_ec2-resource-network-interface)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [UnassignPrivateIpAddresses](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_UnassignPrivateIpAddresses.html) **
- **Description:** Grants permission to unassign one or more secondary private IP addresses from a network interface
- **Resource types (\*required):** [network-interface\*](#list_ec2-resource-network-interface)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [UnassignPrivateNatGatewayAddress](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_UnassignPrivateNatGatewayAddress.html) **
- **Description:** Grants permission to unassign secondary private IPv4 addresses from a private NAT gateway
- **Resource types (\*required):** [natgateway\*](#list_ec2-resource-natgateway)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [UnlockSnapshot](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_UnlockSnapshot.html) **
- **Description:** Grants permission to unlock a snapshot that is locked in governance mode or in compliance mode while still in the cooling-off period
- **Resource types (\*required):** [snapshot\*](#list_ec2-resource-snapshot)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
- **Access level:** Write
- ** [UnmonitorInstances](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_UnmonitorInstances.html) **
- **Description:** Grants permission to disable detailed monitoring for a running instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [UpdateCapacityManagerMonitoredTagKeys](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_UpdateCapacityManagerMonitoredTagKeys.html) **
- **Description:** Grants permission to activate or deactivate tag keys for monitoring by EC2 Capacity Manager
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [UpdateCapacityManagerOrganizationsAccess](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_UpdateCapacityManagerOrganizationsAccess.html) **
- **Description:** Grants permission to update the Organizations access setting for EC2 Capacity Manager
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [UpdateInterruptibleCapacityReservationAllocation](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_UpdateInterruptibleCapacityReservationAllocation.html) **
- **Description:** Grants permission to update the number of instances allocated to an interruptible reservation, allowing you to add more capacity or reclaim capacity to your source Capacity Reservation
- **Resource types (\*required):** [capacity-reservation\*](#list_ec2-resource-capacity-reservation)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CapacityReservationFleet](#list_ec2-ec2_CapacityReservationFleet)
[ec2:CommitmentDuration](#list_ec2-ec2_CommitmentDuration)
[ec2:CreateDate](#list_ec2-ec2_CreateDate)
[ec2:DestinationCapacityReservationId](#list_ec2-ec2_DestinationCapacityReservationId)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:EndDate](#list_ec2-ec2_EndDate)
[ec2:EndDateType](#list_ec2-ec2_EndDateType)
[ec2:EphemeralStorage](#list_ec2-ec2_EphemeralStorage)
[ec2:InstanceCount](#list_ec2-ec2_InstanceCount)
[ec2:InstanceMatchCriteria](#list_ec2-ec2_InstanceMatchCriteria)
[ec2:InstancePlatform](#list_ec2-ec2_InstancePlatform)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:InterruptibleCapacityReservationId](#list_ec2-ec2_InterruptibleCapacityReservationId)
[ec2:InterruptionType](#list_ec2-ec2_InterruptionType)
[ec2:IsInterruptible](#list_ec2-ec2_IsInterruptible)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SourceCapacityReservationId](#list_ec2-ec2_SourceCapacityReservationId)
[ec2:TargetInstanceCount](#list_ec2-ec2_TargetInstanceCount)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
- ** [UpdateSecurityGroupRuleDescriptionsEgress](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_UpdateSecurityGroupRuleDescriptionsEgress.html) **
- **Description:** Grants permission to update descriptions for one or more outbound rules in a VPC security group
- **Resource types (\*required):** [security-group\*](#list_ec2-resource-security-group)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [UpdateSecurityGroupRuleDescriptionsIngress](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_UpdateSecurityGroupRuleDescriptionsIngress.html) **
- **Description:** Grants permission to update descriptions for one or more inbound rules in a security group
- **Resource types (\*required):** [security-group\*](#list_ec2-resource-security-group)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Write
- ** [WithdrawByoipCidr](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_WithdrawByoipCidr.html) **
- **Description:** Grants permission to stop advertising an address range that was provisioned for use in Amazon through bring your own IP addresses (BYOIP)
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
## Permission-only actions for Amazon EC2
The following actions are defined by Amazon EC2 but are not directly invocable through any API operation. They can only be used in IAM policy statements to grant or deny permissions.
****
- ** [AssociateVerifiedAccessInstanceWebAcl](https://docs.amazonaws.cn/verified-access/latest/ug/waf-integration.html) **
- **Description:** Grants permission to associate an Amazon Web Application Firewall (WAF) web access control list (ACL) with a Verified Access instance
- **Resource types (\*required):** [verified-access-instance\*](#list_ec2-resource-verified-access-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [AttachApplianceToNatGateway](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_AttachApplianceToNatGateway.html) **
- **Description:** Grants permission to attach an appliance with a public/private Natgateway
- **Resource types (\*required):** [natgateway\*](#list_ec2-resource-natgateway)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Permissions management, Write
- ** [AttachResourcesToPlacementGroup](https://docs.amazonaws.cn/UserGuide/placement-groups.html) **
- **Description:** Grants permission to attach resources to a placement group
- **Resource types (\*required):** [placement-group\*](#list_ec2-resource-placement-group)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:PlacementGroupName](#list_ec2-ec2_PlacementGroupName)
[ec2:PlacementGroupStrategy](#list_ec2-ec2_PlacementGroupStrategy)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Permissions management, Write
- ** [CreateCoipPoolPermission](https://docs.amazonaws.cn/outposts/latest/userguide/identity-access-management.html) **
- **Description:** Grants permission to allow a service to access a customer-owned IP (CoIP) pool
- **Resource types (\*required):** [coip-pool\*](#list_ec2-resource-coip-pool)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Permissions management, Write
- ** [CreateLocalGatewayRouteTablePermission](https://docs.amazonaws.cn/outposts/latest/userguide/identity-access-management.html) **
- **Description:** Grants permission to allow a service to access a local gateway route table
- **Resource types (\*required):** [local-gateway-route-table\*](#list_ec2-resource-local-gateway-route-table)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Permissions management, Write
- ** [CreateOdbNetworkPeering](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_CreateOdbNetworkPeering.html) **
- **Description:** Grants permission to allow Oracle Database@Amazon to create a peering connection between an ODB network and a VPC
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Permissions management, Write
- ** [DeleteCoipPoolPermission](https://docs.amazonaws.cn/outposts/latest/userguide/identity-access-management.html) **
- **Description:** Grants permission to deny a service from accessing a customer-owned IP (CoIP) pool
- **Resource types (\*required):** [coip-pool\*](#list_ec2-resource-coip-pool)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Permissions management, Write
- ** [DeleteLocalGatewayRouteTablePermission](https://docs.amazonaws.cn/outposts/latest/userguide/identity-access-management.html) **
- **Description:** Grants permission to deny a service from accessing a local gateway route table
- **Resource types (\*required):** [local-gateway-route-table\*](#list_ec2-resource-local-gateway-route-table)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Permissions management, Write
- ** [DeleteOdbNetworkPeering](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DeleteOdbNetworkPeering.html) **
- **Description:** Grants permission to allow Oracle Database@Amazon to delete a peering connection between an ODB network and a VPC
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Permissions management, Write
- ** [DeleteResourcePolicy](https://docs.amazonaws.cn/vpc/latest/ipam/share-pool-ipam.html) **
- **Description:** Grants permission to remove an IAM policy that enables cross-account sharing from a resource
- **Resource types (\*required):** [ipam-pool](#list_ec2-resource-ipam-pool) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [placement-group](#list_ec2-resource-placement-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:PlacementGroupName](#list_ec2-ec2_PlacementGroupName)
[ec2:PlacementGroupStrategy](#list_ec2-ec2_PlacementGroupStrategy)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [verified-access-group](#list_ec2-resource-verified-access-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Permissions management, Write
- ** [DescribeLocalGatewayRouteTablePermissions](https://docs.amazonaws.cn/outposts/latest/userguide/identity-access-management.html) **
- **Description:** Grants permission to allow a service to describe local gateway route table permissions
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DescribeVerifiedAccessInstanceWebAclAssociations](https://docs.amazonaws.cn/verified-access/latest/ug/waf-integration.html) **
- **Description:** Grants permission to describe the Amazon Web Application Firewall (WAF) web access control list (ACL) associations for a Verified Access instance
- **Resource types (\*required):**
- **Condition keys:** [ec2:Region](#list_ec2-ec2_Region)
- **Access level:** List
- ** [DetachApplianceFromNatGateway](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_DetachApplianceFromNatGateway.html) **
- **Description:** Grants permission to detach an appliance from a public/private Natgateway
- **Resource types (\*required):** [natgateway\*](#list_ec2-resource-natgateway)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Vpc](#list_ec2-ec2_Vpc)
- **Access level:** Permissions management, Write
- ** [DetachResourcesFromPlacementGroup](https://docs.amazonaws.cn/UserGuide/placement-groups.html) **
- **Description:** Grants permission to detach resources from a placement group
- **Resource types (\*required):** [placement-group\*](#list_ec2-resource-placement-group)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:PlacementGroupName](#list_ec2-ec2_PlacementGroupName)
[ec2:PlacementGroupStrategy](#list_ec2-ec2_PlacementGroupStrategy)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Permissions management, Write
- ** [DisassociateVerifiedAccessInstanceWebAcl](https://docs.amazonaws.cn/verified-access/latest/ug/waf-integration.html) **
- **Description:** Grants permission to disassociate an Amazon Web Application Firewall (WAF) web access control list (ACL) from a Verified Access instance
- **Resource types (\*required):** [verified-access-instance\*](#list_ec2-resource-verified-access-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [GetResourcePolicy](https://docs.amazonaws.cn/vpc/latest/ipam/share-pool-ipam.html) **
- **Description:** Grants permission to describe an IAM policy that enables cross-account sharing
- **Resource types (\*required):** [ipam-pool](#list_ec2-resource-ipam-pool) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [placement-group](#list_ec2-resource-placement-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:PlacementGroupName](#list_ec2-ec2_PlacementGroupName)
[ec2:PlacementGroupStrategy](#list_ec2-ec2_PlacementGroupStrategy)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [verified-access-group](#list_ec2-resource-verified-access-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Read
- ** [GetVerifiedAccessInstanceWebAcl](https://docs.amazonaws.cn/verified-access/latest/ug/waf-integration.html) **
- **Description:** Grants permission to show the Amazon Web Application Firewall (WAF) web access control list (ACL) for a Verified Access instance
- **Resource types (\*required):** [verified-access-instance\*](#list_ec2-resource-verified-access-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** List
- ** [ImportByoipCidrToIpam](https://docs.amazonaws.cn/vpc/latest/ipam/tutorials-byoip-ipam-transfer-ipv4.html) **
- **Description:** Grants permission to transfer existing BYOIP IPv4 CIDRs to IPAM
- **Resource types (\*required):** [ipam-pool\*](#list_ec2-resource-ipam-pool)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Write
- ** [InjectApiError](https://docs.amazonaws.cn/fis/latest/userguide/fis-actions-reference.html) **
- **Description:** Grants permission to temporarily inject errors for target API requests
- **Resource types (\*required):**
- **Condition keys:** [ec2:FisActionId](#list_ec2-ec2_FisActionId)
[ec2:FisTargetArns](#list_ec2-ec2_FisTargetArns)
[ec2:Region](#list_ec2-ec2_Region)
- **Access level:** Write
- ** [InjectVolumeIOLatency](https://docs.amazonaws.cn/fis/latest/userguide/fis-actions-reference.html#ebs-actions-reference) **
- **Description:** Grants permission to temporarily inject latency to I/O operations for a target Amazon EBS volume
- **Resource types (\*required):** [volume\*](#list_ec2-resource-volume)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType)
- **Access level:** Write
- ** [ModifyOdbNetworkPeering](https://docs.amazonaws.cn/AWSEC2/latest/APIReference/API_ModifyOdbNetworkPeering.html) **
- **Description:** Grants permission to allow Oracle Database@Amazon to modify the settings of a peering connection between an ODB network and a VPC
- **Resource types (\*required):** [vpc\*](#list_ec2-resource-vpc)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID)
- **Access level:** Permissions management, Write
- ** [PauseVolumeIO](https://docs.amazonaws.cn/fis/latest/userguide/fis-actions-reference.html#ebs-actions-reference) **
- **Description:** Grants permission to temporarily pause I/O operations for a target Amazon EBS volume
- **Resource types (\*required):** [instance](#list_ec2-resource-instance) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Resource types (\*required):** [volume\*](#list_ec2-resource-volume) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType)
- **Access level:** Write
- ** [PutResourcePolicy](https://docs.amazonaws.cn/vpc/latest/ipam/share-pool-ipam.html) **
- **Description:** Grants permission to attach an IAM policy that enables cross-account sharing to a resource
- **Resource types (\*required):** [ipam-pool](#list_ec2-resource-ipam-pool) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [placement-group](#list_ec2-resource-placement-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:PlacementGroupName](#list_ec2-ec2_PlacementGroupName)
[ec2:PlacementGroupStrategy](#list_ec2-ec2_PlacementGroupStrategy)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Resource types (\*required):** [verified-access-group](#list_ec2-resource-verified-access-group) / **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
- **Access level:** Permissions management, Write
- ** [SendSpotInstanceInterruptions](https://docs.amazonaws.cn/fis/latest/userguide/fis-actions-reference.html#send-spot-instance-interruptions) **
- **Description:** Grants permission to interrupt a Spot Instance
- **Resource types (\*required):** [instance\*](#list_ec2-resource-instance)
- **Condition keys:** [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
- **Access level:** Write
## Resource types defined by Amazon EC2
The following resource types are defined by this service and can be used in the `Resource` element of IAM permission policy statements.
****
| Resource types | ARN | Condition keys |
| --- | --- | --- |
| [capacity-block](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:capacity-block/${CapacityBlockId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [capacity-manager-data-export](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:capacity-manager-data-export/${CapacityManagerDataExportId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [capacity-reservation](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/ec2-capacity-reservations.html) | arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation/${CapacityReservationId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CapacityReservationFleet](#list_ec2-ec2_CapacityReservationFleet)
[ec2:CommitmentDuration](#list_ec2-ec2_CommitmentDuration)
[ec2:CreateDate](#list_ec2-ec2_CreateDate)
[ec2:DestinationCapacityReservationId](#list_ec2-ec2_DestinationCapacityReservationId)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:EndDate](#list_ec2-ec2_EndDate)
[ec2:EndDateType](#list_ec2-ec2_EndDateType)
[ec2:EphemeralStorage](#list_ec2-ec2_EphemeralStorage)
[ec2:InstanceCount](#list_ec2-ec2_InstanceCount)
[ec2:InstanceMatchCriteria](#list_ec2-ec2_InstanceMatchCriteria)
[ec2:InstancePlatform](#list_ec2-ec2_InstancePlatform)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:InterruptibleCapacityReservationId](#list_ec2-ec2_InterruptibleCapacityReservationId)
[ec2:InterruptionType](#list_ec2-ec2_InterruptionType)
[ec2:IsInterruptible](#list_ec2-ec2_IsInterruptible)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SourceCapacityReservationId](#list_ec2-ec2_SourceCapacityReservationId)
[ec2:TargetInstanceCount](#list_ec2-ec2_TargetInstanceCount)
[ec2:Tenancy](#list_ec2-ec2_Tenancy) |
| [capacity-reservation-cancellation-quote](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation-cancellation-quote/${CapacityReservationCancellationQuoteId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [capacity-reservation-fleet](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation-fleet/${CapacityReservationFleetId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [carrier-gateway](https://docs.amazonaws.cn/vpc/latest/userguide/Carrier_Gateway.html) | arn:${Partition}:ec2:${Region}:${Account}:carrier-gateway/${CarrierGatewayId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:Vpc](#list_ec2-ec2_Vpc) |
| [certificate](https://docs.amazonaws.cn/acm/latest/userguide/authen-overview.html#acm-resources-operations) | arn:${Partition}:acm:${Region}:${Account}:certificate/${CertificateId} | |
| [client-vpn-endpoint](https://docs.amazonaws.cn/vpn/latest/clientvpn-admin/what-is.html) | arn:${Partition}:ec2:${Region}:${Account}:client-vpn-endpoint/${ClientVpnEndpointId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ClientRootCertificateChainArn](#list_ec2-ec2_ClientRootCertificateChainArn)
[ec2:CloudwatchLogGroupArn](#list_ec2-ec2_CloudwatchLogGroupArn)
[ec2:CloudwatchLogStreamArn](#list_ec2-ec2_CloudwatchLogStreamArn)
[ec2:DirectoryArn](#list_ec2-ec2_DirectoryArn)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SamlProviderArn](#list_ec2-ec2_SamlProviderArn)
[ec2:ServerCertificateArn](#list_ec2-ec2_ServerCertificateArn) |
| [coip-pool](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:coip-pool/${Ipv4PoolCoipId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [customer-gateway](https://docs.amazonaws.cn/vpn/latest/s2svpn/VPC_VPN.html) | arn:${Partition}:ec2:${Region}:${Account}:customer-gateway/${CustomerGatewayId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [declarative-policies-report](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:declarative-policies-report/${DeclarativePoliciesReportId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [dedicated-host](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/dedicated-hosts-overview.html) | arn:${Partition}:ec2:${Region}:${Account}:dedicated-host/${DedicatedHostId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AutoPlacement](#list_ec2-ec2_AutoPlacement)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:HostRecovery](#list_ec2-ec2_HostRecovery)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Quantity](#list_ec2-ec2_Quantity)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [dhcp-options](https://docs.amazonaws.cn/vpc/latest/userguide/VPC_DHCP_Options.html) | arn:${Partition}:ec2:${Region}:${Account}:dhcp-options/${DhcpOptionsId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:DhcpOptionsID](#list_ec2-ec2_DhcpOptionsID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [egress-only-internet-gateway](https://docs.amazonaws.cn/vpc/latest/userguide/egress-only-internet-gateway.html) | arn:${Partition}:ec2:${Region}:${Account}:egress-only-internet-gateway/${EgressOnlyInternetGatewayId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [elastic-gpu](https://docs.amazonaws.cn/AWSEC2/latest/WindowsGuide/elastic-gpus.html) | arn:${Partition}:ec2:${Region}:${Account}:elastic-gpu/${ElasticGpuId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:ElasticGpuType](#list_ec2-ec2_ElasticGpuType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [elastic-inference](https://docs.amazonaws.cn/elastic-inference/latest/developerguide/what-is-ei.html) | arn:${Partition}:elastic-inference:${Region}:${Account}:elastic-inference-accelerator/${AcceleratorId} | |
| [elastic-ip](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/elastic-ip-addresses-eip.html) | arn:${Partition}:ec2:${Region}:${Account}:elastic-ip/${AllocationId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AllocationId](#list_ec2-ec2_AllocationId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Domain](#list_ec2-ec2_Domain)
[ec2:PublicIpAddress](#list_ec2-ec2_PublicIpAddress)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [export-image-task](https://docs.amazonaws.cn/vm-import/latest/userguide/vmimport-image-import.html#export-vm-image) | arn:${Partition}:ec2:${Region}:${Account}:export-image-task/${ExportImageTaskId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [export-instance-task](https://docs.amazonaws.cn/vm-import/latest/userguide/vmexport.html) | arn:${Partition}:ec2:${Region}:${Account}:export-instance-task/${ExportTaskId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [fleet](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/ec2-fleet.html) | arn:${Partition}:ec2:${Region}:${Account}:fleet/${FleetId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [fpga-image](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:fpga-image/${FpgaImageId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [group](https://docs.amazonaws.cn/ARG/latest/userguide/resource-groups.html) | arn:${Partition}:resource-groups:${Region}:${Account}:group/${GroupName} | |
| [host-reservation](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:host-reservation/${HostReservationId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [image](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/AMIs.html) | arn:${Partition}:ec2:${Region}::image/${ImageId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:ImageID](#list_ec2-ec2_ImageID)
[ec2:ImageType](#list_ec2-ec2_ImageType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:Public](#list_ec2-ec2_Public)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType) |
| [image-usage-report](https://docs.amazonaws.cn/vm-import/latest/userguide/image-usage-report.html) | arn:${Partition}:ec2:${Region}:${Account}:image-usage-report/${ImageUsageReportId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [import-image-task](https://docs.amazonaws.cn/vm-import/latest/userguide/vmimport-image-import.html#import-vm-image) | arn:${Partition}:ec2:${Region}:${Account}:import-image-task/${ImportImageTaskId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [import-snapshot-task](https://docs.amazonaws.cn/vm-import/latest/userguide/vmimport-import-snapshot.html) | arn:${Partition}:ec2:${Region}:${Account}:import-snapshot-task/${ImportSnapshotTaskId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [instance](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/Instances.html) | arn:${Partition}:ec2:${Region}:${Account}:instance/${InstanceId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:CpuOptionsAmdSevSnp](#list_ec2-ec2_CpuOptionsAmdSevSnp)
[ec2:EbsOptimized](#list_ec2-ec2_EbsOptimized)
[ec2:InstanceAutoRecovery](#list_ec2-ec2_InstanceAutoRecovery)
[ec2:InstanceBandwidthWeighting](#list_ec2-ec2_InstanceBandwidthWeighting)
[ec2:InstanceID](#list_ec2-ec2_InstanceID)
[ec2:InstanceMarketType](#list_ec2-ec2_InstanceMarketType)
[ec2:InstanceMetadataTags](#list_ec2-ec2_InstanceMetadataTags)
[ec2:InstanceProfile](#list_ec2-ec2_InstanceProfile)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:MetadataHttpEndpoint](#list_ec2-ec2_MetadataHttpEndpoint)
[ec2:MetadataHttpPutResponseHopLimit](#list_ec2-ec2_MetadataHttpPutResponseHopLimit)
[ec2:MetadataHttpTokens](#list_ec2-ec2_MetadataHttpTokens)
[ec2:NewInstanceProfile](#list_ec2-ec2_NewInstanceProfile)
[ec2:PlacementGroup](#list_ec2-ec2_PlacementGroup)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RootDeviceType](#list_ec2-ec2_RootDeviceType)
[ec2:Tenancy](#list_ec2-ec2_Tenancy) |
| [instance-connect-endpoint](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:instance-connect-endpoint/${InstanceConnectEndpointId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID) |
| [instance-event-window](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:instance-event-window/${InstanceEventWindowId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [internet-gateway](https://docs.amazonaws.cn/vpc/latest/userguide/VPC_Internet_Gateway.html) | arn:${Partition}:ec2:${Region}:${Account}:internet-gateway/${InternetGatewayId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:InternetGatewayID](#list_ec2-ec2_InternetGatewayID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [ipam](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2::${Account}:ipam/${IpamId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [ipam-external-resource-verification-token](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2::${Account}:ipam-external-resource-verification-token/${IpamExternalResourceVerificationTokenId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [ipam-policy](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2::${Account}:ipam-policy/${IpamPolicyId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [ipam-pool](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2::${Account}:ipam-pool/${IpamPoolId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [ipam-pool-allocation](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:ipam-pool-allocation/${IpamPoolAllocationId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [ipam-prefix-list-resolver](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2::${Account}:ipam-prefix-list-resolver/${IpamPrefixListResolverId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [ipam-prefix-list-resolver-target](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2::${Account}:ipam-prefix-list-resolver-target/${IpamPrefixListResolverTargetId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [ipam-resource-discovery](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2::${Account}:ipam-resource-discovery/${IpamResourceDiscoveryId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [ipam-resource-discovery-association](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2::${Account}:ipam-resource-discovery-association/${IpamResourceDiscoveryAssociationId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [ipam-scope](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2::${Account}:ipam-scope/${IpamScopeId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [ipv4pool-ec2](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/using-instance-addressing.html#ip-addressing-eips) | arn:${Partition}:ec2:${Region}:${Account}:ipv4pool-ec2/${Ipv4PoolEc2Id} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [ipv6pool-ec2](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/using-instance-addressing.html#ipv6-addressing) | arn:${Partition}:ec2:${Region}:${Account}:ipv6pool-ec2/${Ipv6PoolEc2Id} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [key-pair](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/ec2-key-pairs.html) | arn:${Partition}:ec2:${Region}:${Account}:key-pair/${KeyPairName} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KeyPairName](#list_ec2-ec2_KeyPairName)
[ec2:KeyPairType](#list_ec2-ec2_KeyPairType)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [launch-template](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/ec2-launch-templates.html) | arn:${Partition}:ec2:${Region}:${Account}:launch-template/${LaunchTemplateId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [license-configuration](https://docs.amazonaws.cn/license-manager/latest/userguide/create-license-configuration.html) | arn:${Partition}:license-manager:${Region}:${Account}:license-configuration:${LicenseConfigurationId} | |
| [local-gateway](https://docs.amazonaws.cn/outposts/latest/userguide/outposts-local-gateways.html#lgw) | arn:${Partition}:ec2:${Region}:${Account}:local-gateway/${LocalGatewayId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [local-gateway-route-table](https://docs.amazonaws.cn/outposts/latest/userguide/outposts-local-gateways.html#route-tables) | arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table/${LocalGatewayRoutetableId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [local-gateway-route-table-virtual-interface-group-association](https://docs.amazonaws.cn/outposts/latest/userguide/outposts-local-gateways.html) | arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table-virtual-interface-group-association/${LocalGatewayRouteTableVirtualInterfaceGroupAssociationId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [local-gateway-route-table-vpc-association](https://docs.amazonaws.cn/outposts/latest/userguide/outposts-local-gateways.html#vpc-associations) | arn:${Partition}:ec2:${Region}:${Account}:local-gateway-route-table-vpc-association/${LocalGatewayRouteTableVpcAssociationId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [local-gateway-virtual-interface](https://docs.amazonaws.cn/outposts/latest/userguide/outposts-local-gateways.html) | arn:${Partition}:ec2:${Region}:${Account}:local-gateway-virtual-interface/${LocalGatewayVirtualInterfaceId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [local-gateway-virtual-interface-group](https://docs.amazonaws.cn/outposts/latest/userguide/outposts-local-gateways.html) | arn:${Partition}:ec2:${Region}:${Account}:local-gateway-virtual-interface-group/${LocalGatewayVirtualInterfaceGroupId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [mac-modification-task](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/mac-modification-task.html) | arn:${Partition}:ec2:${Region}:${Account}:mac-modification-task/${MacModificationTaskId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [natgateway](https://docs.amazonaws.cn/vpc/latest/userguide/vpc-nat-gateway.html) | arn:${Partition}:ec2:${Region}:${Account}:natgateway/${NatGatewayId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Vpc](#list_ec2-ec2_Vpc) |
| [network-acl](https://docs.amazonaws.cn/vpc/latest/userguide/vpc-network-acls.html) | arn:${Partition}:ec2:${Region}:${Account}:network-acl/${NaclId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:NetworkAclID](#list_ec2-ec2_NetworkAclID)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Vpc](#list_ec2-ec2_Vpc) |
| [network-insights-access-scope](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:network-insights-access-scope/${NetworkInsightsAccessScopeId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [network-insights-access-scope-analysis](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:network-insights-access-scope-analysis/${NetworkInsightsAccessScopeAnalysisId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [network-insights-analysis](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:network-insights-analysis/${NetworkInsightsAnalysisId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [network-insights-path](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:network-insights-path/${NetworkInsightsPathId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [network-interface](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/using-eni.html) | arn:${Partition}:ec2:${Region}:${Account}:network-interface/${NetworkInterfaceId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AssociatePublicIpAddress](#list_ec2-ec2_AssociatePublicIpAddress)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthorizedService](#list_ec2-ec2_AuthorizedService)
[ec2:AuthorizedUser](#list_ec2-ec2_AuthorizedUser)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:NetworkInterfaceID](#list_ec2-ec2_NetworkInterfaceID)
[ec2:Permission](#list_ec2-ec2_Permission)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Subnet](#list_ec2-ec2_Subnet)
[ec2:Vpc](#list_ec2-ec2_Vpc) |
| [outpost-lag](outposts-lag.html#outpostlag) | arn:${Partition}:ec2:${Region}:${Account}:outpost-lag/${OutpostLagId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [placement-group](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/placement-groups.html) | arn:${Partition}:ec2:${Region}:${Account}:placement-group/${PlacementGroupName} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:PlacementGroupName](#list_ec2-ec2_PlacementGroupName)
[ec2:PlacementGroupStrategy](#list_ec2-ec2_PlacementGroupStrategy)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [prefix-list](https://docs.amazonaws.cn/vpc/latest/userguide/managed-prefix-lists.html) | arn:${Partition}:ec2:${Region}:${Account}:prefix-list/${PrefixListId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:IpamPrefixListResolverTargetId](#list_ec2-ec2_IpamPrefixListResolverTargetId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [replace-root-volume-task](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/replace-root.html) | arn:${Partition}:ec2:${Region}:${Account}:replace-root-volume-task/${ReplaceRootVolumeTaskId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [reserved-instances](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/ec2-reserved-instances.html) | arn:${Partition}:ec2:${Region}:${Account}:reserved-instances/${ReservationId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:InstanceType](#list_ec2-ec2_InstanceType)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ReservedInstancesOfferingType](#list_ec2-ec2_ReservedInstancesOfferingType)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy) |
| [role](https://docs.amazonaws.cn/IAM/latest/UserGuide/id_roles.html) | arn:${Partition}:iam::${Account}:role/${RoleNameWithPath} | |
| [route-server](https://docs.amazonaws.cn/vpc/latest/userguide/route-server-terms.html) | arn:${Partition}:ec2:${Region}:${Account}:route-server/${RouteServerId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [route-server-endpoint](https://docs.amazonaws.cn/vpc/latest/userguide/route-server-terms.html) | arn:${Partition}:ec2:${Region}:${Account}:route-server-endpoint/${RouteServerEndpointId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [route-server-peer](https://docs.amazonaws.cn/vpc/latest/userguide/route-server-terms.html) | arn:${Partition}:ec2:${Region}:${Account}:route-server-peer/${RouteServerPeerId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [route-table](https://docs.amazonaws.cn/vpc/latest/userguide/VPC_Route_Tables.html) | arn:${Partition}:ec2:${Region}:${Account}:route-table/${RouteTableId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RouteTableID](#list_ec2-ec2_RouteTableID)
[ec2:Vpc](#list_ec2-ec2_Vpc) |
| [secondary-interface](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:secondary-interface/${SecondaryInterfaceId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [secondary-network](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:secondary-network/${SecondaryNetworkId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [secondary-subnet](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:secondary-subnet/${SecondarySubnetId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [security-group](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/ec2-security-groups.html) | arn:${Partition}:ec2:${Region}:${Account}:security-group/${SecurityGroupId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SecurityGroupID](#list_ec2-ec2_SecurityGroupID)
[ec2:Vpc](#list_ec2-ec2_Vpc) |
| [security-group-rule](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:security-group-rule/${SecurityGroupRuleId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [snapshot](https://docs.amazonaws.cn/ebs/latest/userguide/ebs-snapshots.html) | arn:${Partition}:ec2:${Region}::snapshot/${SnapshotId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Add/group](#list_ec2-ec2_Add_group)
[ec2:Add/userId](#list_ec2-ec2_Add_userId)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Location](#list_ec2-ec2_Location)
[ec2:OutpostArn](#list_ec2-ec2_OutpostArn)
[ec2:Owner](#list_ec2-ec2_Owner)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:ProductCode](#list_ec2-ec2_ProductCode)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:Remove/group](#list_ec2-ec2_Remove_group)
[ec2:Remove/userId](#list_ec2-ec2_Remove_userId)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SnapshotCoolOffPeriod](#list_ec2-ec2_SnapshotCoolOffPeriod)
[ec2:SnapshotID](#list_ec2-ec2_SnapshotID)
[ec2:SnapshotLockDuration](#list_ec2-ec2_SnapshotLockDuration)
[ec2:SnapshotTime](#list_ec2-ec2_SnapshotTime)
[ec2:SourceAvailabilityZone](#list_ec2-ec2_SourceAvailabilityZone)
[ec2:SourceOutpostArn](#list_ec2-ec2_SourceOutpostArn)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize) |
| [spot-fleet-request](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:spot-fleet-request/${SpotFleetRequestId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [spot-instances-request](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/using-spot-instances.html) | arn:${Partition}:ec2:${Region}:${Account}:spot-instances-request/${SpotInstanceRequestId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [subnet](https://docs.amazonaws.cn/vpc/latest/userguide/VPC_Subnets.html) | arn:${Partition}:ec2:${Region}:${Account}:subnet/${SubnetId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:SubnetID](#list_ec2-ec2_SubnetID)
[ec2:Vpc](#list_ec2-ec2_Vpc) |
| [subnet-cidr-reservation](https://docs.amazonaws.cn/vpc/latest/userguide/subnet-cidr-reservation.html) | arn:${Partition}:ec2:${Region}:${Account}:subnet-cidr-reservation/${SubnetCidrReservationId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [traffic-mirror-filter](https://docs.amazonaws.cn/vpc/latest/mirroring/traffic-mirroring-filter.html) | arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-filter/${TrafficMirrorFilterId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [traffic-mirror-filter-rule](https://docs.amazonaws.cn/vpc/latest/mirroring/traffic-mirroring-filter.html) | arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-filter-rule/${TrafficMirrorFilterRuleId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [traffic-mirror-session](https://docs.amazonaws.cn/vpc/latest/mirroring/traffic-mirroring-session.html) | arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-session/${TrafficMirrorSessionId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [traffic-mirror-target](https://docs.amazonaws.cn/vpc/latest/mirroring/traffic-mirroring-target.html) | arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-target/${TrafficMirrorTargetId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [transit-gateway](https://docs.amazonaws.cn/vpc/latest/tgw/how-transit-gateways-work.html) | arn:${Partition}:ec2:${Region}:${Account}:transit-gateway/${TransitGatewayId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayId](#list_ec2-ec2_transitGatewayId) |
| [transit-gateway-attachment](https://docs.amazonaws.cn/vpc/latest/tgw/how-transit-gateways-work.html) | arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-attachment/${TransitGatewayAttachmentId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayAttachmentId](#list_ec2-ec2_transitGatewayAttachmentId) |
| [transit-gateway-connect-peer](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-connect-peer/${TransitGatewayConnectPeerId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayConnectPeerId](#list_ec2-ec2_transitGatewayConnectPeerId) |
| [transit-gateway-metering-policy](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-metering-policy/${TransitGatewayMeteringPolicyId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMeteringPolicyId](#list_ec2-ec2_transitGatewayMeteringPolicyId) |
| [transit-gateway-multicast-domain](https://docs.amazonaws.cn/vpc/latest/tgw/tgw-multicast-overview.html) | arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-multicast-domain/${TransitGatewayMulticastDomainId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayMulticastDomainId](#list_ec2-ec2_transitGatewayMulticastDomainId) |
| [transit-gateway-policy-table](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-policy-table/${TransitGatewayPolicyTableId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayPolicyTableId](#list_ec2-ec2_transitGatewayPolicyTableId) |
| [transit-gateway-route-table](https://docs.amazonaws.cn/vpc/latest/tgw/how-transit-gateways-work.html) | arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table/${TransitGatewayRouteTableId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableId](#list_ec2-ec2_transitGatewayRouteTableId) |
| [transit-gateway-route-table-announcement](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-route-table-announcement/${TransitGatewayRouteTableAnnouncementId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:transitGatewayRouteTableAnnouncementId](#list_ec2-ec2_transitGatewayRouteTableAnnouncementId) |
| [verified-access-endpoint](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:verified-access-endpoint/${VerifiedAccessEndpointId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [verified-access-endpoint-target](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:verified-access-endpoint-target/${VerifiedAccessEndpointTargetId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [verified-access-group](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:verified-access-group/${VerifiedAccessGroupId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [verified-access-instance](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/${VerifiedAccessInstanceId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [verified-access-policy](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:verified-access-policy/${VerifiedAccessPolicyId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [verified-access-trust-provider](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format) | arn:${Partition}:ec2:${Region}:${Account}:verified-access-trust-provider/${VerifiedAccessTrustProviderId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [volume](https://docs.amazonaws.cn/ebs/latest/userguide/ebs-volumes.html) | arn:${Partition}:ec2:${Region}:${Account}:volume/${VolumeId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AvailabilityZone](#list_ec2-ec2_AvailabilityZone)
[ec2:AvailabilityZoneId](#list_ec2-ec2_AvailabilityZoneId)
[ec2:Encrypted](#list_ec2-ec2_Encrypted)
[ec2:IsLaunchTemplateResource](#list_ec2-ec2_IsLaunchTemplateResource)
[ec2:KmsKeyId](#list_ec2-ec2_KmsKeyId)
[ec2:LaunchTemplate](#list_ec2-ec2_LaunchTemplate)
[ec2:ManagedResourceOperator](#list_ec2-ec2_ManagedResourceOperator)
[ec2:ParentSnapshot](#list_ec2-ec2_ParentSnapshot)
[ec2:ParentVolume](#list_ec2-ec2_ParentVolume)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VolumeID](#list_ec2-ec2_VolumeID)
[ec2:VolumeInitializationRate](#list_ec2-ec2_VolumeInitializationRate)
[ec2:VolumeIops](#list_ec2-ec2_VolumeIops)
[ec2:VolumeSize](#list_ec2-ec2_VolumeSize)
[ec2:VolumeThroughput](#list_ec2-ec2_VolumeThroughput)
[ec2:VolumeType](#list_ec2-ec2_VolumeType) |
| [vpc](https://docs.amazonaws.cn/vpc/latest/userguide/VPC_Subnets.html) | arn:${Partition}:ec2:${Region}:${Account}:vpc/${VpcId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Ipv4IpamPoolId](#list_ec2-ec2_Ipv4IpamPoolId)
[ec2:Ipv6IpamPoolId](#list_ec2-ec2_Ipv6IpamPoolId)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:Tenancy](#list_ec2-ec2_Tenancy)
[ec2:VpcID](#list_ec2-ec2_VpcID) |
| [vpc-block-public-access-exclusion](https://docs.amazonaws.cn/vpc/latest/userguide/vpc-block-public-access.html) | arn:${Partition}:ec2:${Region}:${Account}:vpc-block-public-access-exclusion/${VpcBlockPublicAccessExclusionId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [vpc-encryption-control](https://docs.amazonaws.cn/vpc/latest/userguide/vpc-encryption-control.html) | arn:${Partition}:ec2:${Region}:${Account}:vpc-encryption-control/${VpcEncryptionControlId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [vpc-endpoint](https://docs.amazonaws.cn/vpc/latest/userguide/endpoint-services-overview.html) | arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint/${VpcEndpointId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpcePrivateDnsPreference](#list_ec2-ec2_VpcePrivateDnsPreference)
[ec2:VpcePrivateDnsSpecifiedDomains](#list_ec2-ec2_VpcePrivateDnsSpecifiedDomains)
[ec2:VpceServiceName](#list_ec2-ec2_VpceServiceName)
[ec2:VpceServiceOwner](#list_ec2-ec2_VpceServiceOwner)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion) |
| [vpc-endpoint-connection](https://docs.amazonaws.cn/vpc/latest/userguide/endpoint-services-overview.html) | arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-connection/${VpcEndpointConnectionId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [vpc-endpoint-service](https://docs.amazonaws.cn/vpc/latest/userguide/endpoint-services-overview.html) | arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/${VpcEndpointServiceId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpceMultiRegion](#list_ec2-ec2_VpceMultiRegion)
[ec2:VpceServicePrivateDnsName](#list_ec2-ec2_VpceServicePrivateDnsName)
[ec2:VpceServiceRegion](#list_ec2-ec2_VpceServiceRegion)
[ec2:VpceSupportedRegion](#list_ec2-ec2_VpceSupportedRegion) |
| [vpc-endpoint-service-permission](https://docs.amazonaws.cn/vpc/latest/privatelink/vpc-endpoints-access.html#vpc-endpoint-policies) | arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service-permission/${VpcEndpointServicePermissionId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [vpc-flow-log](https://docs.amazonaws.cn/vpc/latest/userguide/flow-logs.html) | arn:${Partition}:ec2:${Region}:${Account}:vpc-flow-log/${VpcFlowLogId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [vpc-peering-connection](https://docs.amazonaws.cn/vpc/latest/peering/what-is-vpc-peering.html) | arn:${Partition}:ec2:${Region}:${Account}:vpc-peering-connection/${VpcPeeringConnectionId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:AccepterVpc](#list_ec2-ec2_AccepterVpc)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RequesterVpc](#list_ec2-ec2_RequesterVpc)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:VpcPeeringConnectionID](#list_ec2-ec2_VpcPeeringConnectionID) |
| [vpn-concentrator](https://docs.amazonaws.cn/vpn/latest/s2svpn/VPC_VPN.html) | arn:${Partition}:ec2:${Region}:${Account}:vpn-concentrator/${VpnConcentratorId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
| [vpn-connection](https://docs.amazonaws.cn/vpn/latest/s2svpn/VPC_VPN.html) | arn:${Partition}:ec2:${Region}:${Account}:vpn-connection/${VpnConnectionId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Attribute](#list_ec2-ec2_Attribute)
[ec2:Attribute/${AttributeName}](#list_ec2-ec2_Attribute___AttributeName_)
[ec2:AuthenticationType](#list_ec2-ec2_AuthenticationType)
[ec2:DPDTimeoutSeconds](#list_ec2-ec2_DPDTimeoutSeconds)
[ec2:GatewayType](#list_ec2-ec2_GatewayType)
[ec2:IKEVersions](#list_ec2-ec2_IKEVersions)
[ec2:InsideTunnelCidr](#list_ec2-ec2_InsideTunnelCidr)
[ec2:InsideTunnelIpv6Cidr](#list_ec2-ec2_InsideTunnelIpv6Cidr)
[ec2:Phase1DHGroup](#list_ec2-ec2_Phase1DHGroup)
[ec2:Phase1EncryptionAlgorithms](#list_ec2-ec2_Phase1EncryptionAlgorithms)
[ec2:Phase1IntegrityAlgorithms](#list_ec2-ec2_Phase1IntegrityAlgorithms)
[ec2:Phase1LifetimeSeconds](#list_ec2-ec2_Phase1LifetimeSeconds)
[ec2:Phase2DHGroup](#list_ec2-ec2_Phase2DHGroup)
[ec2:Phase2EncryptionAlgorithms](#list_ec2-ec2_Phase2EncryptionAlgorithms)
[ec2:Phase2IntegrityAlgorithms](#list_ec2-ec2_Phase2IntegrityAlgorithms)
[ec2:Phase2LifetimeSeconds](#list_ec2-ec2_Phase2LifetimeSeconds)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:RekeyFuzzPercentage](#list_ec2-ec2_RekeyFuzzPercentage)
[ec2:RekeyMarginTimeSeconds](#list_ec2-ec2_RekeyMarginTimeSeconds)
[ec2:ReplayWindowSizePackets](#list_ec2-ec2_ReplayWindowSizePackets)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_)
[ec2:RoutingType](#list_ec2-ec2_RoutingType) |
| [vpn-connection-device-type](https://docs.amazonaws.cn/vpn/latest/s2svpn/VPC_VPN.html) | arn:${Partition}:ec2:${Region}:${Account}:vpn-connection-device-type/${VpnConnectionDeviceTypeId} | [ec2:Region](#list_ec2-ec2_Region) |
| [vpn-gateway](https://docs.amazonaws.cn/vpn/latest/s2svpn/VPC_VPN.html) | arn:${Partition}:ec2:${Region}:${Account}:vpn-gateway/${VpnGatewayId} | [aws:RequestTag/${TagKey}](#list_ec2-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_ec2-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_ec2-aws_TagKeys)
[ec2:Region](#list_ec2-ec2_Region)
[ec2:ResourceTag/${TagKey}](#list_ec2-ec2_ResourceTag___TagKey_) |
## Condition keys for Amazon EC2
Amazon EC2 defines the following condition keys that can be used in the `Condition` element of an IAM policy.
****
| Condition keys | Description | Type |
| --- | --- | --- |
| [aws:RequestTag/${TagKey}](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/supported-iam-actions-tagging.html#control-tagging) | Filters access by a tag key and value pair that is allowed in the request | String |
| [aws:ResourceTag/${TagKey}](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/control-access-with-tags.html) | Filters access by a tag key and value pair of a resource | String |
| [aws:TagKeys](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/supported-iam-actions-tagging.html#control-tagging) | Filters access by a list of tag keys that are allowed in the request | ArrayOfString |
| [ec2:AccepterVpc](https://docs.amazonaws.cn/vpc/latest/peering/security-iam.html) | Filters access by the ARN of an accepter VPC in a VPC peering connection | ARN |
| [ec2:Add/group](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the group being added to a snapshot | String |
| [ec2:Add/userId](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the account id being added to a snapshot | String |
| [ec2:AllocationId](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the allocation ID of the Elastic IP address | String |
| [ec2:AssociatePublicIpAddress](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by whether the user wants to associate a public IP address with the instance | Bool |
| [ec2:Attribute](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#attribute-key) | Filters access by an attribute of a resource | String |
| [ec2:Attribute/${AttributeName}](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#attribute-key) | Filters access by an attribute being set on a resource | String |
| [ec2:AuthenticationType](https://docs.amazonaws.cn/vpn/latest/s2svpn/vpn-authentication-access-control.html) | Filters access by the authentication type for the VPN tunnel endpoints | String |
| [ec2:AuthorizedService](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the Amazon service that has permission to use a resource | String |
| [ec2:AuthorizedUser](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by an IAM principal that has permission to use a resource | String |
| [ec2:AutoPlacement](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the Auto Placement properties of a Dedicated Host | String |
| [ec2:AvailabilityZone](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the name of an Availability Zone in an Amazon Web Services Region | String |
| [ec2:AvailabilityZoneId](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ID of an Availability Zone in an Amazon Web Services Region | String |
| [ec2:CapacityReservationFleet](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ARN of the Capacity Reservation Fleet | ARN |
| [ec2:ClientRootCertificateChainArn](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ARN of the client root certificate chain | ARN |
| [ec2:CloudwatchLogGroupArn](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ARN of the CloudWatch Logs log group | ARN |
| [ec2:CloudwatchLogStreamArn](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ARN of the CloudWatch Logs log stream | ARN |
| [ec2:CommitmentDuration](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by commitment duration of the Capacity Reservation | Numeric |
| [ec2:CpuOptionsAmdSevSnp](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/sev-snp.html) | Filters access by the state of AMD SEV-SNP CPU Options. Currently, only US East (Ohio) and Europe (Ireland) are supported | String |
| [ec2:CreateAction](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/supported-iam-actions-tagging.html) | Filters access by the name of a resource-creating API action | String |
| [ec2:CreateDate](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the date and time at which the Capacity Reservation was created | Date |
| [ec2:DPDTimeoutSeconds](https://docs.amazonaws.cn/vpn/latest/s2svpn/vpn-authentication-access-control.html) | Filters access by the duration after which DPD timeout occurs on a VPN tunnel | Numeric |
| [ec2:DestinationCapacityReservationId](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ID of the Capacity Reservation that you want to move capacity into | ARN |
| [ec2:DhcpOptionsID](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the ID of a dynamic host configuration protocol (DHCP) options set | String |
| [ec2:DirectoryArn](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ARN of the directory | ARN |
| [ec2:Domain](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the domain of the Elastic IP address | String |
| [ec2:EbsOptimized](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by whether the instance is enabled for EBS optimization | Bool |
| [ec2:ElasticGpuType](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the type of Elastic Graphics accelerator | String |
| [ec2:Encrypted](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by whether the EBS volume is encrypted | Bool |
| [ec2:EndDate](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the date and time at which the Capacity Reservation ends | Date |
| [ec2:EndDateType](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the way in which the Capacity Reservation ends | String |
| [ec2:EphemeralStorage](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by whether the instance is enabled for ephemeral storage | Bool |
| [ec2:FisActionId](https://docs.amazonaws.cn/fis/latest/userguide/fis-actions-reference.html) | Filters access by the ID of an Amazon FIS action | String |
| [ec2:FisTargetArns](https://docs.amazonaws.cn/fis/latest/userguide/fis-actions-reference.html) | Filters access by the ARN of an Amazon FIS target | ArrayOfARN |
| [ec2:GatewayType](https://docs.amazonaws.cn/vpn/latest/s2svpn/vpn-authentication-access-control.html) | Filters access by the gateway type for a VPN endpoint on the Amazon side of a VPN connection | String |
| [ec2:HostRecovery](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by whether host recovery is enabled for a Dedicated Host | String |
| [ec2:IKEVersions](https://docs.amazonaws.cn/vpn/latest/s2svpn/vpn-authentication-access-control.html) | Filters access by the internet key exchange (IKE) versions that are permitted for a VPN tunnel | ArrayOfString |
| [ec2:ImageID](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the ID of an image | String |
| [ec2:ImageType](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the type of image (machine, aki, or ari) | String |
| [ec2:InsideTunnelCidr](https://docs.amazonaws.cn/vpn/latest/s2svpn/vpn-authentication-access-control.html) | Filters access by the range of inside IP addresses for a VPN tunnel | String |
| [ec2:InsideTunnelIpv6Cidr](https://docs.amazonaws.cn/vpn/latest/s2svpn/vpn-authentication-access-control.html) | Filters access by a range of inside IPv6 addresses for a VPN tunnel | String |
| [ec2:InstanceAutoRecovery](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by whether the instance type supports auto recovery | String |
| [ec2:InstanceBandwidthWeighting](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the bandwidth weighting of an instance | String |
| [ec2:InstanceCount](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the number of instances | Numeric |
| [ec2:InstanceID](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the ID of an instance | String |
| [ec2:InstanceMarketType](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the market or purchasing option of an instance (capacity-block, on-demand, or spot) | String |
| [ec2:InstanceMatchCriteria](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the type of instance launches that the Capacity Reservation accepts | String |
| [ec2:InstanceMetadataTags](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by whether the instance allows access to instance tags from the instance metadata | String |
| [ec2:InstancePlatform](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the type of operating system for which the Capacity Reservation reserves capacity | ARN |
| [ec2:InstanceProfile](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ARN of an instance profile | ARN |
| [ec2:InstanceType](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the type of instance | String |
| [ec2:InternetGatewayID](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the ID of an internet gateway | String |
| [ec2:InterruptibleCapacityReservationId](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ID of an interruptible Capacity Reservation | String |
| [ec2:InterruptionType](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the type of interruption | String |
| [ec2:IpamPrefixListResolverTargetId](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the IPAM prefix list resolver target ID that is syncing CIDRs to a managed prefix list | String |
| [ec2:Ipv4IpamPoolId](iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ID of an IPAM pool provided for IPv4 CIDR block allocation | String |
| [ec2:Ipv6IpamPoolId](iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ID of an IPAM pool provided for IPv6 CIDR block allocation | String |
| [ec2:IsInterruptible](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by whether Capacity Reservations are interruptible | Bool |
| [ec2:IsLaunchTemplateResource](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by whether users are able to override resources that are specified in the launch template | Bool |
| [ec2:KeyPairName](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the name of a key pair | String |
| [ec2:KeyPairType](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the type of a key pair | String |
| [ec2:KmsKeyId](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ID of an Amazon KMS key provided in the request | String |
| [ec2:LaunchTemplate](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ARN of a launch template | ARN |
| [ec2:Location](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the destination for the snapshot copy | String |
| [ec2:ManagedResourceOperator](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the presence of an EC2 operator provisioning a managed resource | String |
| [ec2:MetadataHttpEndpoint](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by whether the HTTP endpoint is enabled for the instance metadata service | String |
| [ec2:MetadataHttpPutResponseHopLimit](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the allowed number of hops when calling the instance metadata service | Numeric |
| [ec2:MetadataHttpTokens](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by whether tokens are required when calling the instance metadata service (optional or required) | String |
| [ec2:NetworkAclID](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the ID of a network access control list (ACL) | String |
| [ec2:NetworkInterfaceID](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the ID of an elastic network interface | String |
| [ec2:NewInstanceProfile](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ARN of the instance profile being attached | ARN |
| [ec2:OutpostArn](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ARN of the Outpost | ARN |
| [ec2:Owner](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the owner of the resource (amazon, aws-marketplace, or an Amazon Web Services account ID) | String |
| [ec2:ParentSnapshot](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ARN of the parent snapshot | ARN |
| [ec2:ParentVolume](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ARN of the parent volume from which the snapshot was created | ARN |
| [ec2:Permission](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the type of permission for a resource (INSTANCE-ATTACH or EIP-ASSOCIATE) | String |
| [ec2:Phase1DHGroup](https://docs.amazonaws.cn/vpn/latest/s2svpn/vpn-authentication-access-control.html) | Filters access by the Diffie-Hellman group numbers that are permitted for a VPN tunnel for the phase 1 IKE negotiations | ArrayOfString |
| [ec2:Phase1EncryptionAlgorithms](https://docs.amazonaws.cn/vpn/latest/s2svpn/vpn-authentication-access-control.html) | Filters access by the encryption algorithms that are permitted for a VPN tunnel for the phase 1 IKE negotiations | ArrayOfString |
| [ec2:Phase1IntegrityAlgorithms](https://docs.amazonaws.cn/vpn/latest/s2svpn/vpn-authentication-access-control.html) | Filters access by the integrity algorithms that are permitted for a VPN tunnel for the phase 1 IKE negotiations | ArrayOfString |
| [ec2:Phase1LifetimeSeconds](https://docs.amazonaws.cn/vpn/latest/s2svpn/vpn-authentication-access-control.html) | Filters access by the lifetime in seconds for phase 1 of the IKE negotiations for a VPN tunnel | Numeric |
| [ec2:Phase2DHGroup](https://docs.amazonaws.cn/vpn/latest/s2svpn/vpn-authentication-access-control.html) | Filters access by the Diffie-Hellman group numbers that are permitted for a VPN tunnel for the phase 2 IKE negotiations | ArrayOfString |
| [ec2:Phase2EncryptionAlgorithms](https://docs.amazonaws.cn/vpn/latest/s2svpn/vpn-authentication-access-control.html) | Filters access by the encryption algorithms that are permitted for a VPN tunnel for the phase 2 IKE negotiations | ArrayOfString |
| [ec2:Phase2IntegrityAlgorithms](https://docs.amazonaws.cn/vpn/latest/s2svpn/vpn-authentication-access-control.html) | Filters access by the integrity algorithms that are permitted for a VPN tunnel for the phase 2 IKE negotiations | ArrayOfString |
| [ec2:Phase2LifetimeSeconds](https://docs.amazonaws.cn/vpn/latest/s2svpn/vpn-authentication-access-control.html) | Filters access by the lifetime in seconds for phase 2 of the IKE negotiations for a VPN tunnel | Numeric |
| [ec2:PlacementGroup](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ARN of the placement group | ARN |
| [ec2:PlacementGroupName](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the name of a placement group | String |
| [ec2:PlacementGroupStrategy](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the instance placement strategy used by the placement group (cluster, spread, or partition) | String |
| [ec2:ProductCode](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the product code that is associated with the AMI | String |
| [ec2:Public](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by whether the image has public launch permissions | Bool |
| [ec2:PublicIpAddress](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by a public IP address | String |
| [ec2:Quantity](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the number of Dedicated Hosts in a request | Numeric |
| [ec2:Region](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the name of the Amazon Web Services Region | String |
| [ec2:RekeyFuzzPercentage](https://docs.amazonaws.cn/vpn/latest/s2svpn/vpn-authentication-access-control.html) | Filters access by the percentage of increase of the rekey window (determined by the rekey margin time) within which the rekey time is randomly selected for a VPN tunnel | Numeric |
| [ec2:RekeyMarginTimeSeconds](https://docs.amazonaws.cn/vpn/latest/s2svpn/vpn-authentication-access-control.html) | Filters access by the margin time before the phase 2 lifetime expires for a VPN tunnel | Numeric |
| [ec2:Remove/group](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the group being removed from a snapshot | String |
| [ec2:Remove/userId](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the account id being removed from a snapshot | String |
| [ec2:ReplayWindowSizePackets](iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the number of packets in an IKE replay window | String |
| [ec2:RequesterVpc](https://docs.amazonaws.cn/vpc/latest/peering/security-iam.html) | Filters access by the ARN of a requester VPC in a VPC peering connection | ARN |
| [ec2:ReservedInstancesOfferingType](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/ec2-reserved-instances.html#ri-payment-options) | Filters access by the payment option of the Reserved Instance offering (No Upfront, Partial Upfront, or All Upfront) | String |
| [ec2:ResourceTag/${TagKey}](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/control-access-with-tags.html) | Filters access by a tag key and value pair of a resource | String |
| [ec2:RoleDelivery](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the version of the instance metadata service for retrieving IAM role credentials for EC2 | Numeric |
| [ec2:RootDeviceType](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the root device type of the instance (ebs or instance-store) | String |
| [ec2:RouteTableID](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the ID of a route table | String |
| [ec2:RoutingType](https://docs.amazonaws.cn/vpn/latest/s2svpn/vpn-authentication-access-control.html) | Filters access by the routing type for the VPN connection | String |
| [ec2:SamlProviderArn](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ARN of the IAM SAML identity provider | ARN |
| [ec2:SecurityGroupID](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the ID of a security group | String |
| [ec2:ServerCertificateArn](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ARN of the server certificate | ARN |
| [ec2:SnapshotCoolOffPeriod](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the compliance mode cooling-off period | Numeric |
| [ec2:SnapshotID](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the ID of a snapshot | String |
| [ec2:SnapshotLockDuration](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the snapshot lock duration | Numeric |
| [ec2:SnapshotTime](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the initiation time of a snapshot | String |
| [ec2:SourceAvailabilityZone](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the name of the Availability Zone from which the request originated | String |
| [ec2:SourceCapacityReservationId](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ID of the Capacity Reservation from which you want to move capacity | ARN |
| [ec2:SourceInstanceARN](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ARN of the instance from which the request originated | ARN |
| [ec2:SourceOutpostArn](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ARN of the Outpost from which the request originated | ARN |
| [ec2:Subnet](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ARN of the subnet | ARN |
| [ec2:SubnetID](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the ID of a subnet | String |
| [ec2:TargetInstanceCount](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the number of instances the interruptible Capacity Reservation is assigned | Numeric |
| [ec2:Tenancy](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the tenancy of the VPC or instance (default, dedicated, or host) | String |
| [ec2:VolumeID](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the ID of a volume | String |
| [ec2:VolumeInitializationRate](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the initialization rate of the volume, in MiBps | Numeric |
| [ec2:VolumeIops](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the the number of input/output operations per second (IOPS) provisioned for the volume | Numeric |
| [ec2:VolumeSize](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the size of the volume, in GiB | Numeric |
| [ec2:VolumeThroughput](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the throughput of the volume, in MiBps | Numeric |
| [ec2:VolumeType](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the type of volume (gp2, gp3, io1, io2, st1, sc1, or standard) | String |
| [ec2:Vpc](https://docs.amazonaws.cn/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys) | Filters access by the ARN of the VPC | ARN |
| [ec2:VpcID](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the ID of a virtual private cloud (VPC) | String |
| [ec2:VpcPeeringConnectionID](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the ID of a VPC peering connection | String |
| [ec2:VpceMultiRegion](https://docs.amazonaws.cn/vpc/latest/userguide/vpc-endpoints-iam.html) | Filters access by multi region of the VPC endpoint service | String |
| [ec2:VpcePrivateDnsPreference](https://docs.amazonaws.cn/vpc/latest/userguide/vpc-endpoints-iam.html) | Filters access by the private DNS preference | String |
| [ec2:VpcePrivateDnsSpecifiedDomains](https://docs.amazonaws.cn/vpc/latest/userguide/vpc-endpoints-iam.html) | Filters access by the private DNS domains | ArrayOfString |
| [ec2:VpceServiceName](https://docs.amazonaws.cn/vpc/latest/userguide/vpc-endpoints-iam.html) | Filters access by the name of the VPC endpoint service | String |
| [ec2:VpceServiceOwner](https://docs.amazonaws.cn/vpc/latest/userguide/vpc-endpoints-iam.html) | Filters access by the service owner of the VPC endpoint service (amazon, aws-marketplace, or an Amazon Web Services account ID) | String |
| [ec2:VpceServicePrivateDnsName](https://docs.amazonaws.cn/vpc/latest/userguide/vpc-endpoints-iam.html) | Filters access by the private DNS name of the VPC endpoint service | String |
| [ec2:VpceServiceRegion](https://docs.amazonaws.cn/vpc/latest/userguide/vpc-endpoints-iam.html) | Filters access by the region of the VPC endpoint service | String |
| [ec2:VpceSupportedRegion](https://docs.amazonaws.cn/vpc/latest/userguide/vpc-endpoints-iam.html) | Filters access by the supported region of the VPC endpoint service | String |
| [ec2:transitGatewayAttachmentId](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the ID of a transit gateway attachment | String |
| [ec2:transitGatewayConnectPeerId](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the ID of a transit gateway connect peer | String |
| [ec2:transitGatewayId](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the ID of a transit gateway | String |
| [ec2:transitGatewayMeteringPolicyId](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the ID of a metering policy id | String |
| [ec2:transitGatewayMulticastDomainId](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the ID of a transit gateway multicast domain | String |
| [ec2:transitGatewayPolicyTableId](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the ID of a transit gateway policy table | String |
| [ec2:transitGatewayRouteTableAnnouncementId](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the ID of a transit gateway route table announcement | String |
| [ec2:transitGatewayRouteTableId](iam-policies-for-amazon-ec2.html#imageId-key) | Filters access by the ID of a transit gateway route table | String |