AWS autoscaling documentation change

Service: autoscaling · 2025-08-28 · Documentation low

File: autoscaling/ec2/userguide/ec2-auto-scaling-launch-template-permissions.md

Summary

Removed JSON policy examples for EC2 RunInstances permissions and instance tagging

Security assessment

The change deletes granular IAM policy examples but does not fix a security flaw. While the examples demonstrated security best practices (like resource restrictions), their removal is a documentation cleanup rather than a security update.

Diff

diff --git a/autoscaling/ec2/userguide/ec2-auto-scaling-launch-template-permissions.md b/autoscaling/ec2/userguide/ec2-auto-scaling-launch-template-permissions.md
index ffddd815d..c550cbbaa 100644
--- a//autoscaling/ec2/userguide/ec2-auto-scaling-launch-template-permissions.md
+++ b//autoscaling/ec2/userguide/ec2-auto-scaling-launch-template-permissions.md
@@ -95,35 +94,0 @@ The following example restricts permissions for the `ec2:RunInstances` action to
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Effect": "Allow",
-                "Action": "ec2:RunInstances",
-                "Resource": "arn:aws:ec2:111122223333:launch-template/*",
-                "Condition": {
-                    "StringEquals": { "aws:ResourceTag/purpose": "testing" }
-                }
-            },
-            {
-                "Effect": "Allow",
-                "Action": "ec2:RunInstances",
-                "Resource": [
-                    "arn:aws:ec2::image/ami-*",
-                    "arn:aws:ec2:111122223333:instance/*",
-                    "arn:aws:ec2:111122223333:subnet/*",
-                    "arn:aws:ec2:111122223333:volume/*",
-                    "arn:aws:ec2:111122223333:key-pair/*",
-                    "arn:aws:ec2:111122223333:network-interface/*",
-                    "arn:aws:ec2:111122223333:security-group/*"
-                ]
-            }
-        ]
-    }
-    
-
@@ -215,40 +179,0 @@ The following example controls the configuration of the instances that a user ca
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Effect": "Allow",
-                "Action": "ec2:RunInstances",
-                "Resource": [
-                    "arn:aws:ec2:111122223333:launch-template/*",
-                    "arn:aws:ec2:us-east-1::image/ami-04d5cc9b88example",
-                    "arn:aws:ec2:us-east-1:111122223333:subnet/subnet-1a2b3c4d",
-                    "arn:aws:ec2:111122223333:volume/*",
-                    "arn:aws:ec2:111122223333:key-pair/*",
-                    "arn:aws:ec2:111122223333:network-interface/*",
-                    "arn:aws:ec2:us-east-1:111122223333:security-group/sg-903004f88example"
-                ]
-            },
-            {
-                "Effect": "Allow",
-                "Action": "ec2:RunInstances",
-                "Resource": "arn:aws:ec2:111122223333:instance/*",
-                "Condition": {
-                    "StringEquals": {
-                        "ec2:InstanceType": [
-                            "t2.micro",
-                            "t2.small"
-                        ]
-                    }
-                }
-            }
-        ]
-    }
-    
-
@@ -341,22 +265,0 @@ The following example allows users to tag instances and volumes on creation. Thi
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Effect": "Allow",
-                "Action": "ec2:CreateTags",
-                "Resource": "arn:aws:ec2:111122223333:*/*",
-                "Condition": {
-                    "StringEquals": { "ec2:CreateAction": "RunInstances" }
-                }
-            }
-        ]
-    }
-    
-