Replicate Instances - Additional IAM Policy

This policy contains the permissions needed for the replicate instances scheduled tasks.

If you are using the Ylastic Administrator user, you do NOT need this additional policy. This policy is only required if you are using the Ylastic Read only user.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "ec2:CopyImage",
        "ec2:CopySnapshot",
        "ec2:CreateImage",
        "ec2:CreateTags",
        "ec2:DeleteSnapshot",
        "ec2:DeleteTags",
        "ec2:DeregisterImage",
        "ec2:DescribeImages",
        "ec2:DescribeInstances",
        "ec2:DescribeSnapshots",
        "ec2:DescribeSnapshotAttribute",
        "ec2:DescribeSnapshots",
        "ec2:DescribeTags",
        "ec2:DescribeVolumes",
        "ec2:ModifySnapshotAttribute",
        "ec2:RegisterImage",
        "ec2:ResetSnapshotAttribute",
        "kms:ListAliases",
        "sts:DecodeAuthorizationMessage"
      ],
      "Resource": "*"
    }
  ]
}