Policy: AWS > EC2 > Instance > Approved > Instance Types

A list of instance types that the AWS EC2 instance is approved to use.

The expected format is an array of instance types. You may use the * and ? wildcard characters (and more).

This policy will be evaluated by the Approved control. If an AWS EC2 instance is not matched by the approved list, it will be subject to the action specified in the AWS > EC2 > Instance > Approved policy.

See Approved for more information.

Note: It is recommended to include instance types in this policy in the AWS > EC2 > Permissions > Lockdown > Instance Types policy as well, to ensure that the lockdown policy will not restrict these approved instance types.

Resource Types

This policy targets the following resource types:

AWS > EC2 > Instance

Primary Policy

This policy is used with the following primary policy:

AWS > EC2 > Instance > Approved

Controls

AWS > EC2 > Instance > Approved

Policy Packs

This policy setting is used by the following policy packs:

Enforce AWS EC2 Instances Use Approved Instance Types

Policy Specification

Schema Type	`array`
Default	`- '*'`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/resourceApproved

Policy Type URI

tmod:@turbot/aws-ec2#/policy/types/instanceApprovedInstanceTypes

GraphQL

query policyType(id: "tmod:@turbot/aws-ec2#/policy/types/instanceApprovedInstanceTypes") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/aws-ec2#/policy/types/instanceApprovedInstanceTypes'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/aws-ec2#/policy/types/instanceApprovedInstanceTypes'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/aws-ec2#/policy/types/instanceApprovedInstanceTypes"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-ec2#/policy/types/instanceApprovedInstanceTypes"