Skip to content

Instantly share code, notes, and snippets.

@kesor
Created January 17, 2018 18:22
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
Star You must be signed in to star a gist
Save kesor/76e6faa1c6936e4c43fbac304426667e to your computer and use it in GitHub Desktop.
example iam policy for vpc deny
{
"Effect": "Deny",
"Action": [ "ec2:AttachInternetGateway", "ec2:DetachInternetGateway" ],
"Resource": "arn:aws:ec2:REGION:ACCOUNTNUMBER:*",
"Condition": {
"StringEquals": {
"ec2:vpc": "arn:aws:ec2:REGION:ACCOUNTNUMBER:vpc/VPC-ID"
}
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment