Conditional ec2:CreateTags permission #32

iann0036 · Apr 25, 2021 · fc14110 · fc14110
1 parent 33e1911
commit fc14110
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/map.json b/map.json
@@ -19046,6 +19046,13 @@
                         "template": "${Ipv6Pool}"
                     }
                 }
+            },
+            {
+                "action": "ec2:CreateTags",
+                "resource_mappings": {},
+                "resourcearn_mappings": {
+                    "vpc": "%%iftruthy%${TagSpecifications[].ResourceType}%arn:${Partition}:ec2:${Region}:${Account}:vpc/*%%%"
+                }
             }
         ],
         "EC2.CreateVpcEndpoint": [