-- Updated 2016-01-28
To automate policy creation, use the scripts found here https://www.github.com/shalomc/spotinst-automation
{
"Version"
:
"2012-10-17"
,
"Statement"
: [
{
"Sid"
:
"Stmt1437894762000"
,
"Effect"
:
"Allow"
,
"Action"
: [
"ec2:RequestSpotInstances"
,
"ec2:DescribeAccountAttributes"
,
"ec2:DescribeAddresses"
,
"ec2:DescribeAvailabilityZones"
,
"ec2:DescribeImageAttribute"
,
"ec2:DescribeImages"
,
"ec2:DescribeImportImageTasks"
,
"ec2:DescribeImportImageTasks"
,
"ec2:DescribeImportSnapshotTasks"
,
"ec2:DescribeImportSnapshotTasks"
,
"ec2:DescribeInstanceAttribute"
,
"ec2:DescribeInstanceStatus"
,
"ec2:DescribeInstances"
,
"ec2:DescribeKeyPairs"
,
"ec2:DescribeNetworkInterfaceAttribute"
,
"ec2:DescribeNetworkInterfaces"
,
"ec2:DescribePlacementGroups"
,
"ec2:DescribePrefixLists"
,
"ec2:DescribeRegions"
,
"ec2:DescribeReservedInstances"
,
"ec2:DescribeSecurityGroups"
,
"ec2:DescribeSnapshotAttribute"
,
"ec2:DescribeSnapshots"
,
"ec2:DescribeSpotDatafeedSubscription"
,
"ec2:DescribeSpotInstanceRequests"
,
"ec2:DescribeSpotPriceHistory"
,
"ec2:DescribeSubnets"
,
"ec2:DescribeTags"
,
"ec2:DescribeVolumeAttribute"
,
"ec2:DescribeVolumeStatus"
,
"ec2:DescribeVolumes"
,
"ec2:DescribeVpcAttribute"
,
"ec2:DescribeVpcClassicLink"
,
"ec2:DescribeVpcEndpointServices"
,
"ec2:DescribeVpcs"
,
"ec2:AllocateAddress"
,
"ec2:AssignPrivateIpAddresses"
,
"ec2:AssociateAddress"
,
"ec2:AttachVolume"
,
"ec2:CancelSpotInstanceRequests"
,
"ec2:ConfirmProductInstance"
,
"ec2:CopyImage"
,
"ec2:CopySnapshot"
,
"ec2:CreateImage"
,
"ec2:CreateNetworkInterface"
,
"ec2:CreatePlacementGroup"
,
"ec2:CreateSecurityGroup"
,
"ec2:CreateSnapshot"
,
"ec2:CreateSpotDatafeedSubscription"
,
"ec2:CreateTags"
,
"ec2:CreateVolume"
,
"ec2:DeleteTags"
,
"ec2:DeleteVolume"
,
"ec2:DetachNetworkInterface"
,
"ec2:DetachVolume"
,
"ec2:DisassociateAddress"
,
"ec2:ModifyImageAttribute"
,
"ec2:ModifyInstanceAttribute"
,
"ec2:ModifyNetworkInterfaceAttribute"
,
"ec2:MonitorInstances"
,
"ec2:RebootInstances"
,
"ec2:RegisterImage"
,
"ec2:RunInstances"
,
"ec2:StartInstances"
,
"ec2:StopInstances"
,
"ec2:TerminateInstances"
,
"ec2:UnassignPrivateIpAddresses"
,
"ec2:DeregisterImage"
,
"ec2:DeleteSnapshot"
],
"Resource"
: [
"*"
]
},
{
"Sid"
:
"Stmt1437895027000"
,
"Effect"
:
"Allow"
,
"Action"
: [
"elasticloadbalancing:DeregisterInstancesFromLoadBalancer"
,
"elasticloadbalancing:DescribeInstanceHealth"
,
"elasticloadbalancing:DescribeLoadBalancerAttributes"
,
"elasticloadbalancing:DescribeLoadBalancerPolicyTypes"
,
"elasticloadbalancing:DescribeLoadBalancerPolicies"
,
"elasticloadbalancing:DescribeLoadBalancers"
,
"elasticloadbalancing:DescribeTags"
,
"elasticloadbalancing:RemoveTags"
,
"elasticloadbalancing:RegisterInstancesWithLoadBalancer"
],
"Resource"
: [
"*"
]
},
{
"Sid"
:
"Stmt1437895081000"
,
"Effect"
:
"Allow"
,
"Action"
: [
"cloudwatch:DescribeAlarmHistory"
,
"cloudwatch:DescribeAlarms"
,
"cloudwatch:DescribeAlarmsForMetric"
,
"cloudwatch:GetMetricStatistics"
,
"cloudwatch:ListMetrics"
,
"cloudwatch:PutMetricAlarm"
,
"cloudwatch:PutMetricData"
],
"Resource"
: [
"*"
]
},
{
"Sid"
:
"Stmt1441527617000"
,
"Effect"
:
"Allow"
,
"Action"
: [
"sns:Publish"
,
"sns:ListTopics"
],
"Resource"
: [
"*"
]
},
{
"Sid"
:
"Stmt1441527635000"
,
"Effect"
:
"Allow"
,
"Action"
: [
"iam:AddRoleToInstanceProfile"
,
"iam:ListInstanceProfiles"
,
"iam:ListInstanceProfilesForRole"
,
"iam:PassRole"
,
"iam:ListRoles"
],
"Resource"
: [
"*"
]
},
{
"Sid"
:
"Stmt1441527705000"
,
"Effect"
:
"Allow"
,
"Action"
: [
"elasticmapreduce:*"
],
"Resource"
: [
"*"
]
},
{
"Sid"
:
"Stmt1441527605000"
,
"Effect"
:
"Allow"
,
"Action"
: [
"elasticbeanstalk:*"
],
"Resource"
: [
"*"
]
},
{
"Sid"
:
"Stmt1453730798000"
,
"Effect"
:
"Allow"
,
"Action"
: [
"autoscaling:DescribeAutoScalingGroups"
,
"autoscaling:DescribeLaunchConfigurations"
,
"autoscaling:DescribePolicies"
],
"Resource"
: [
"*"
]
},
{
"Sid"
:
"Stmt1453731008000"
,
"Effect"
:
"Allow"
,
"Action"
: [
"s3:CreateBucket"
,
"s3:GetObject"
,
"cloudformation:ListStackResources"
],
"Resource"
: [
"*"
]
}
]
}
Comments
0 comments
Please sign in to leave a comment.