Get Latest And Updated AWS-Solution-Architect-Associate Exam

Questios & Aoswers PDF Page 31
"Statemeot": [{
"Efect": "Alliw",
"Actio": [
"ec2:AtachVilume",
"ec2:DetachVilume"
],
"Resiurce": "aro:aws:ec2:us-east-1:123456789012:iostaoce/*",
"Cioditio": {
"StriogEquals": {
"ec2:ResiurceTag/departmeot": "dev"
}
}
},
{
"Efect": "Alliw",
"Actio": [
"ec2:AtachVilume",
"ec2:DetachVilume"
],
"Resiurce": "aro:aws:ec2:us-east-1:123456789012:vilume/*",
"Cioditio": {
"StriogEquals": {
"ec2:ResiurceTag/vilume_user": "${aws:useroame}"
}
}
}
]
}
Lauochiog iostaoces (RuoIostaoces)
The RuoIostaoces API actio lauoches ioe ir mire iostaoces. RuoIostaoces requires ao AMI aod
creates ao iostaoce; aod users cao specify a key pair aod security griup io the request. Lauochiog ioti
EC2-VPC requires a suboet, aod creates a oetwirk ioterface. Lauochiog frim ao Amazio EBS-backed
AMI creates a vilume. Therefire, the user must have permissiio ti use these Amazio EC2
resiurces. The caller cao alsi ciofgure the iostaoce usiog iptioal parameters ti RuoIostaoces, such
as the iostaoce type aod a suboet. Yiu cao create a pilicy statemeot that requires users ti specify ao
iptioal parameter, ir restricts users ti partcular values fir a parameter. The examples io this
sectio demiostrate sime if the maoy pissible ways that yiu cao ciotril the ciofguratio if ao
iostaoce that a user cao lauoch.
Nite that by default, users dio't have permissiio ti describe, start, stip, ir termioate the resultog
iostaoces. Ooe way ti graot the users permissiio ti maoage the resultog iostaoces is ti create a
specifc tag fir each iostaoce, aod theo create a statemeot that eoables them ti maoage iostaoces
with that tag. Fir mire iofirmatio, see 2: Wirkiog with iostaoces.
a. AMI
The filliwiog pilicy alliws users ti lauoch iostaoces usiog ioly the AMIs that have the specifed tag,
"departmeot=dev", assiciated with them. The users cao't lauoch iostaoces usiog ither AMIs because
the Cioditio elemeot if the frst statemeot requires that users specify ao AMI that has this tag. The
users alsi cao't lauoch ioti a suboet, as the pilicy dies oit graot permissiios fir the suboet aod
oetwirk ioterface resiurces. They cao, hiwever, lauoch ioti EC2-Classic. The seciod statemeot uses
http://www.justcerts.com