How to start a private instance in EC2 using IAM

Question

How can I start an EC2 instance by user A.

and the started instance by user A is unable to be seen by user B.

Can I do this with IAM?

I tried this set:

{
  "Statement": [
    {
      "Sid": "Stmt1341824399883",
      "Action": [
        "ec2:DescribeInstanceAttribute",
        "ec2:DescribeInstanceStatus",
        "ec2:DescribeInstances"
      ],
      "Effect": "Deny",
      "Resource": [
        "*"
      ]
    }
  ]
}

but it hides everything including the instances started by user A

possible duplicate of Within Amazon AWS IAM, can I restrict a group of users to access/launch/terminate only certain AMIs or instances? — Steffen Opel
– Steffen Opel, Commented Jul 9, 2012 at 16:17

Frederick Cheung · Accepted Answer · 2012-07-09 13:54:08Z

5

Unfortunately there are no Amazon Resource Names(ARNs) for Amazon EC2: you can't write a policy that applies only to certain EC2 instances.

If you require isolation between the two, the only way I know of is to create a separate AWS account. You can use consolidated billing so that billing is aggregated with your other account, and you can share some things like EBS snapshots between accounts. Most things however can't be shared between accounts.

answered Jul 9, 2012 at 13:54

Frederick Cheung

84.3k9 gold badges156 silver badges175 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How to start a private instance in EC2 using IAM

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related