Does anyone know of a way to create the following permission on AWS IAM:
- Allows tagging of any EC2 instance, on the condition that:
- The AMI from which the instance was created has the tag "foo" with the value "bar".
I can see how to create a general
CreateTags permission, and a permission to tag a particular instance specified by instance id, but I'm so far struggling to find a way to create the restriction I want.