Link Search Menu Expand Document

EC2 Image Builder

  • prefix: imagebuilder

Table of Contents

Privileges

CancelImageCreation

  • description: Cancel an image creation
  • access level: Write
  • resource types
{
    "image": {
        "resource_type": "image",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}

CreateComponent

  • description: Create a new component
  • access level: Write
  • resource types
{
    "component": {
        "resource_type": "component",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "kmsKey": {
        "resource_type": "kmsKey",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}

CreateDistributionConfiguration

  • description: Create a new distribution configuration
  • access level: Write
  • resource types
{
    "distributionConfiguration": {
        "resource_type": "distributionConfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}

CreateImage

  • description: Create a new image
  • access level: Write
  • resource types
{
    "image": {
        "resource_type": "image",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "imagebuilder:GetImageRecipe",
            "imagebuilder:GetInfrastructureConfiguration"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}

CreateImagePipeline

  • description: Create a new image pipeline
  • access level: Write
  • resource types
{
    "imagePipeline": {
        "resource_type": "imagePipeline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "imagebuilder:GetImageRecipe"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}

CreateImageRecipe

  • description: Create a new Image Recipe
  • access level: Write
  • resource types
{
    "imageRecipe": {
        "resource_type": "imageRecipe",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "imagebuilder:GetComponent"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}

CreateInfrastructureConfiguration

  • description: Create a new infrastructure configuration
  • access level: Write
  • resource types
{
    "infrastructureConfiguration": {
        "resource_type": "infrastructureConfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:RequestTag/${TagKey}",
            "aws:TagKeys",
            "imagebuilder:CreatedResourceTagKeys",
            "imagebuilder:CreatedResourceTag/<key>"
        ],
        "dependent_actions": []
    }
}

DeleteComponent

  • description: Delete a component
  • access level: Write
  • resource types
{
    "component": {
        "resource_type": "component",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}

DeleteDistributionConfiguration

  • description: Delete a distribution configuration
  • access level: Write
  • resource types
{
    "distributionConfiguration": {
        "resource_type": "distributionConfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}

DeleteImage

  • description: Delete an image
  • access level: Write
  • resource types
{
    "image": {
        "resource_type": "image",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}

DeleteImagePipeline

  • description: Delete an image pipeline
  • access level: Write
  • resource types
{
    "imagePipeline": {
        "resource_type": "imagePipeline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}

DeleteImageRecipe

  • description: Grants permission to delete an image recipe
  • access level: Write
  • resource types
{
    "imageRecipe": {
        "resource_type": "imageRecipe",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}

DeleteInfrastructureConfiguration

  • description: Delete an infrastructure configuration
  • access level: Write
  • resource types
{
    "infrastructureConfiguration": {
        "resource_type": "infrastructureConfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}

GetComponent

  • description: View details about a component
  • access level: Read
  • resource types
{
    "component": {
        "resource_type": "component",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}

GetComponentPolicy

  • description: View the resource policy associated with a component
  • access level: Read
  • resource types
{
    "component": {
        "resource_type": "component",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}

GetDistributionConfiguration

  • description: View details about a distribution configuration
  • access level: Read
  • resource types
{
    "distributionConfiguration": {
        "resource_type": "distributionConfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}

GetImage

  • description: View details about an image
  • access level: Read
  • resource types
{
    "image": {
        "resource_type": "image",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}

GetImagePipeline

  • description: View details about an image pipeline
  • access level: Read
  • resource types
{
    "imagePipeline": {
        "resource_type": "imagePipeline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}

GetImagePolicy

  • description: View the resource policy associated with an image
  • access level: Read
  • resource types
{
    "image": {
        "resource_type": "image",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}

GetImageRecipe

  • description: View details about an image recipe
  • access level: Read
  • resource types
{
    "imageRecipe": {
        "resource_type": "imageRecipe",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}

GetImageRecipePolicy

  • description: View the resource policy associated with an image recipe
  • access level: Read
  • resource types
{
    "imageRecipe": {
        "resource_type": "imageRecipe",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}

GetInfrastructureConfiguration

  • description: View details about an infrastructure configuration
  • access level: Read
  • resource types
{
    "infrastructureConfiguration": {
        "resource_type": "infrastructureConfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}

ListComponentBuildVersions

  • description: List the component build versions in your account
  • access level: List
  • resource types
{
    "componentVersion": {
        "resource_type": "componentVersion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}

ListComponents

  • description: List the component versions owned by or shared with your account
  • access level: List
  • resource types
{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}

ListDistributionConfigurations

  • description: List the distribution configurations in your account
  • access level: List
  • resource types
{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}

ListImageBuildVersions

  • description: List the image build versions in your account
  • access level: List
  • resource types
{
    "imageVersion": {
        "resource_type": "imageVersion",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}

ListImagePipelines

  • description: List the image pipelines in your account
  • access level: List
  • resource types
{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}

ListImageRecipes

  • description: List the image recipes owned by or shared with your account
  • access level: List
  • resource types
{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}

ListImages

  • description: List the image versions owned by or shared with your account
  • access level: List
  • resource types
{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}

ListInfrastructureConfigurations

  • description: List the infrastructure configurations in your account
  • access level: List
  • resource types
{
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    }
}

ListTagsForResource

  • description: List tag for an Image Builder resource
  • access level: Read
  • resource types
{
    "component": {
        "resource_type": "component",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "distributionConfiguration": {
        "resource_type": "distributionConfiguration",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "image": {
        "resource_type": "image",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "imagePipeline": {
        "resource_type": "imagePipeline",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "imageRecipe": {
        "resource_type": "imageRecipe",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "infrastructureConfiguration": {
        "resource_type": "infrastructureConfiguration",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}

PutComponentPolicy

  • description: Set the resource policy associated with a component
  • access level: Permissions management
  • resource types
{
    "component": {
        "resource_type": "component",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}

PutImagePolicy

  • description: Set the resource policy associated with an image
  • access level: Permissions management
  • resource types
{
    "image": {
        "resource_type": "image",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}

PutImageRecipePolicy

  • description: Set the resource policy associated with an image recipe
  • access level: Permissions management
  • resource types
{
    "imageRecipe": {
        "resource_type": "imageRecipe",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}

StartImagePipelineExecution

  • description: Create a new image from a pipeline
  • access level: Write
  • resource types
{
    "imagePipeline": {
        "resource_type": "imagePipeline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "imagebuilder:GetImagePipeline"
        ]
    }
}

TagResource

  • description: Tag an Image Builder resource
  • access level: Tagging
  • resource types
{
    "component": {
        "resource_type": "component",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "distributionConfiguration": {
        "resource_type": "distributionConfiguration",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "image": {
        "resource_type": "image",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "imagePipeline": {
        "resource_type": "imagePipeline",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "imageRecipe": {
        "resource_type": "imageRecipe",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "infrastructureConfiguration": {
        "resource_type": "infrastructureConfiguration",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:TagKeys",
            "aws:RequestTag/${TagKey}",
            "aws:ResourceTag/${TagKey}"
        ],
        "dependent_actions": []
    }
}

UntagResource

  • description: Untag an Image Builder resource
  • access level: Tagging
  • resource types
{
    "component": {
        "resource_type": "component",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "distributionConfiguration": {
        "resource_type": "distributionConfiguration",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "image": {
        "resource_type": "image",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "imagePipeline": {
        "resource_type": "imagePipeline",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "imageRecipe": {
        "resource_type": "imageRecipe",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "infrastructureConfiguration": {
        "resource_type": "infrastructureConfiguration",
        "required": false,
        "condition_keys": [],
        "dependent_actions": []
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "aws:TagKeys"
        ],
        "dependent_actions": []
    }
}

UpdateDistributionConfiguration

  • description: Update an existing distribution configuration
  • access level: Write
  • resource types
{
    "distributionConfiguration": {
        "resource_type": "distributionConfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}

UpdateImagePipeline

  • description: Update an existing image pipeline
  • access level: Write
  • resource types
{
    "imagePipeline": {
        "resource_type": "imagePipeline",
        "required": true,
        "condition_keys": [],
        "dependent_actions": []
    }
}

UpdateInfrastructureConfiguration

  • description: Update an existing infrastructure configuration
  • access level: Write
  • resource types
{
    "infrastructureConfiguration": {
        "resource_type": "infrastructureConfiguration",
        "required": true,
        "condition_keys": [],
        "dependent_actions": [
            "iam:PassRole"
        ]
    },
    "": {
        "resource_type": "",
        "required": false,
        "condition_keys": [
            "aws:ResourceTag/${TagKey}",
            "imagebuilder:CreatedResourceTagKeys",
            "imagebuilder:CreatedResourceTag/<key>"
        ],
        "dependent_actions": []
    }
}