防止意外删除某些AWS AMI

时间:2019-10-10 10:48:18

标签: amazon-web-services delete-file amazon-ami

在清理旧的/未使用的资源时,有时我们可能会遇到删除已使用/当前的AMI的麻烦。 必须防止意外删除/注销AMI。

我当时正在考虑向AMI添加一个标签,如果该标签存在,则永远不应删除它。

以类似于实例终止保护的方式, 我希望CERTAIN AMI具有双重故障保护机制,以避免意外删除。

请提出同样的方法。

1 个答案:

答案 0 :(得分:2)

基于Actions, Resources, and Condition Keys for Amazon EC2 - AWS Identity and Access Management,看来df <- structure(list(Class = structure(c(1L, 4L, 3L, 5L, 2L), .Label = c("Goal", "MapClass", "Password", "TreeApp", "XMLParser"), class = "factor"), Branch = c(12L, 20L, 4L, 9L, 33L), LA_type = structure(c(2L, 1L, 2L, 1L, 2L), .Label = c("Rugged", "Smooth"), class = "factor"), Method_type = structure(c(4L, 1L, 2L, 1L, 3L), .Label = c("constructor", "private", "public", "public_static"), class = "factor"), Method_call = structure(c(1L, 2L, 1L, 2L, 1L), .Label = c("never_called", "none"), class = "factor"), Branch_type = structure(c(4L, 1L, 2L, 5L, 3L), .Label = c("IF_ICMPGE", "IFEQ", "IFGT", "IFNE", "IFNONNULL"), class = "factor"), Branch_condition = c(TRUE, FALSE, FALSE, TRUE, FALSE), Tested_parameter = structure(c(3L, 2L, 2L, 3L, 1L), .Label = c("double", "int", "String"), class = "factor")), class = "data.frame", row.names = c(NA, -5L)) 没有任何条件键。

因此,看来不可能仅将此命令限制于某些AMI或标签。

一些选项:

  • 仅将此权限限制为某些受信任用户
  • 将AMI放在单独的AWS账户中,用户可以在其中通过共享访问它,但无权删除它