Update resource_perimeter_scp.json

SwaraGandhi · web-flow · commit e175dac1aa74 · 2025-12-23T11:14:54.000-05:00
diff --git a/service_control_policies/resource_perimeter_scp.json b/service_control_policies/resource_perimeter_scp.json
@@ -12,7 +12,6 @@
             "arn:aws:ssm:*::automation-definition/*",
             "arn:aws:imagebuilder:*:aws:component/*",
             "arn:aws:imagebuilder:*:aws:image/*",
-            "arn:aws:ec2:*::image/*",
             "arn:aws:ec2:*:aws:prefix-list/*",
             "arn:aws:lambda:*:<service-account-id>:layer:*",
             "arn:aws:ecr:*:<service-account-id>:repository/*",
@@ -36,6 +35,7 @@
          "Condition":{
             "StringNotEqualsIfExists":{
                "aws:ResourceOrgID":"<my-org-id>",
+               "ec2:Owner": "amazon",
                "aws:PrincipalTag/dp:exclude:resource": "true"
             }
          }
@@ -79,4 +79,4 @@
          }
       }
    ]
-}
+}

Original file line number	Diff line number	Diff line change
`@@ -12,7 +12,6 @@`
`12`	`12`	`"arn:aws:ssm:::automation-definition/",`
`13`	`13`	`"arn:aws:imagebuilder::aws:component/",`
`14`	`14`	`"arn:aws:imagebuilder::aws:image/",`
`15`		`- "arn:aws:ec2:::image/",`
`16`	`15`	`"arn:aws:ec2::aws:prefix-list/",`
`17`	`16`	`"arn:aws:lambda::<service-account-id>:layer:",`
`18`	`17`	`"arn:aws:ecr::<service-account-id>:repository/",`
`@@ -36,6 +35,7 @@`
`36`	`35`	`"Condition":{`
`37`	`36`	`"StringNotEqualsIfExists":{`
`38`	`37`	`"aws:ResourceOrgID":"<my-org-id>",`
	`38`	`+ "ec2:Owner": "amazon",`
`39`	`39`	`"aws:PrincipalTag/dp:exclude:resource": "true"`
`40`	`40`	`}`
`41`	`41`	`}`
`@@ -79,4 +79,4 @@`
`79`	`79`	`}`
`80`	`80`	`}`
`81`	`81`	`]`
`82`		`-}`
	`82`	`+}`