Introducing Auto Scaling Resource-Level Permissions

You can now define AWS Identity and Access Management (IAM) policies to provide control over which Auto Scaling resources users can access, and the actions that they are permitted to perform on these resources. Auto Scaling helps you maintain application availability and allows you to scale your Amazon EC2 capacity up or down automatically according to conditions you define. You can use Auto Scaling to help ensure that you are running your desired number of Amazon EC2 instances. With resource-level permissions, you can enable different users within an organization, such as application developers and IT specialists, to access and modify Launch Configurations and Auto Scaling groups with appropriately configured permissions.

Starting today, you can configure IAM policies that reference Auto Scaling groups or Launch Configurations using ARNs or wildcards, and specify the users and actions that are permitted under different conditions. For example, you can control the EC2 instance type, such as “m4.large”, which specific users can use for creating Launch Configurations, and limit the maximum size with which they can create Auto Scaling groups.

You can configure resource-level permissions for the Auto Scaling API using the AWS IAM console, AWS Command Line Interface (CLI), and AWS SDK.

For more information visit the following resources:

• Auto Scaling Webpage
• Auto Scaling resource-level permissions documentation
• AWS IAM policies