'Prevent SCP IAM on Ec2 that are part of ASG
I need to enforce tag suite on aws resources.
The solution - use SCP Policies
The problem - it would affect existing ec2 instances in the autoscaling groups and new ec2s won't be created.
Anyone knows of a good way to condition the policy not to have effect on ec2 instances part of any autoscaling groups?
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|