How to goup EC2 instances in order to delegate administrations to differents teams?
- by Olivier
Is it possible (using ARN) to make severals groups of instances.
Then using differents policy to grant some access to a group of instance only and not the other instances?
For example :
{
"Statement": [
{
"Action": "ec2:*",
"Effect": "Allow",
"Resource": "*"
},
{
"Effect": "Allow",
"Action": "elasticloadbalancing:*",
"Resource": "*"
},
{
"Effect": "Allow",
"Action": "cloudwatch:*",
"Resource": "*"
},
{
"Effect": "Allow",
"Action": "autoscaling:*",
"Resource": "*"
}
]
}
Instead of "*" could we use a group or something like that? like a specific subnet? a Tag? or whatever...
Thanks for your help
