aws ec2 wait 需要什么权限

Question

-bash-4.2$ aws ec2 wait instance-running $ARG

Waiter InstanceRunning failed: You are not authorized to perform this operation.

现在您转到 IAM 并看到一个巨大的权限列表，没有一个带有等待字...，因此您查看https://docs.aws.amazon.com/cli/latest/reference/ec2/wait/index.html #cli-aws-ec2-wait并没有找到所需权限的列表...

那么：我需要什么权限aws ec2 wait？

Answer 1

纯粹通过尝试和失败，我发现了那些对我有用的：

{
    "Version": "1980-09-19",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "ec2:StartInstances",
                "ec2:StopInstances"
            ],
            "Resource": "arn:aws:ec2:us-east-1:00000000:instance/i-abababababab"
        },
        {
            "Sid": "VisualEditor1",
            "Effect": "Allow",
            "Action": [
                "ec2:DescribeInstances",
                "ec2:ReportInstanceStatus"
            ],
            "Resource": "*"
        }
    ]
}

我假设你不需要startandstop只是wait，但我把它们包括在内，因为你wait与它们中的任何一个一起使用......

简而言之，这些是：DescribeInstances和ReportInstanceStatus