mirror of
https://github.com/coder/coder.git
synced 2026-11-12 04:32:47 +08:00
Ben Potter
6bed620d6c
* example: ec2: document "minimal" policy * move DescribeInstances * move ModifyInstanceCreditSpecification
65 lines
1.8 KiB
Markdown
65 lines
1.8 KiB
Markdown
---
|
|
name: Develop in Linux on AWS EC2
|
|
description: Get started with Linux development on AWS EC2.
|
|
tags: [cloud, aws]
|
|
---
|
|
|
|
# aws-linux
|
|
|
|
## Getting started
|
|
|
|
Pick this template in `coder templates init` and follow instructions.
|
|
|
|
## Required permissions / policy
|
|
|
|
This example policy allows Coder to create EC2 instances and modify instances provisioned by Coder.
|
|
|
|
```json
|
|
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Sid": "VisualEditor0",
|
|
"Effect": "Allow",
|
|
"Action": [
|
|
"ec2:GetDefaultCreditSpecification",
|
|
"ec2:DescribeIamInstanceProfileAssociations",
|
|
"ec2:DescribeTags",
|
|
"ec2:CreateTags",
|
|
"ec2:RunInstances",
|
|
"ec2:DescribeInstanceCreditSpecifications",
|
|
"ec2:DescribeImages",
|
|
"ec2:ModifyDefaultCreditSpecification",
|
|
"ec2:DescribeVolumes"
|
|
],
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Sid": "CoderResouces",
|
|
"Effect": "Allow",
|
|
"Action": [
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeInstanceAttribute",
|
|
"ec2:UnmonitorInstances",
|
|
"ec2:TerminateInstances",
|
|
"ec2:StartInstances",
|
|
"ec2:StopInstances",
|
|
"ec2:DeleteTags",
|
|
"ec2:MonitorInstances",
|
|
"ec2:CreateTags",
|
|
"ec2:RunInstances",
|
|
"ec2:ModifyInstanceAttribute",
|
|
"ec2:ModifyInstanceCreditSpecification"
|
|
],
|
|
"Resource": "arn:aws:ec2:*:*:instance/*",
|
|
"Condition": {
|
|
"StringEquals": {
|
|
"aws:ResourceTag/Coder_Provisioned": "true"
|
|
}
|
|
}
|
|
}
|
|
]
|
|
}
|
|
```
|
|
|