# AWS actions required for cloud-aws plugin?

**URL:** <https://discuss.elastic.co/t/aws-actions-required-for-cloud-aws-plugin/4154>\
**Category:** Elasticsearch\
**Created:** [March 24, 2011, 4:44am UTC](https://discuss.elastic.co/t/aws-actions-required-for-cloud-aws-plugin/4154 "2011-03-24T04:44:56Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![David\_Taylor](https://avatars.discourse-cdn.com/v4/letter/d/d78d45/32.png) [@David\_Taylor](https://discuss.elastic.co/u/David_Taylor)\
**Post date:** [March 24, 2011, 4:44am UTC](https://discuss.elastic.co/t/aws-actions-required-for-cloud-aws-plugin/4154/1 "2011-03-24T04:44:56Z")

</div>

Hi there,

I want to use AWS IAM to lock-down various services and applications, such  
as the elastic search cloud-aws plugin. I'm guessing the cloud-aws plugin  
should only need ec2:DescribeInstances. Is that correct?

Cheers,  
David.

---

<div class="post-metadata">

**Author:** ![kimchy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kimchy/32/44952_2.png) [@kimchy](https://discuss.elastic.co/u/kimchy)\
**Post date:** [March 24, 2011, 10:24am UTC](https://discuss.elastic.co/t/aws-actions-required-for-cloud-aws-plugin/4154/2 "2011-03-24T10:24:35Z")

</div>

For discovery, yea, the only API used is DescribeInstances.  
On Thursday, March 24, 2011 at 6:44 AM, David Taylor wrote:

> Hi there,
> 
> I want to use AWS IAM to lock-down various services and applications, such as the Elasticsearch cloud-aws plugin. I'm guessing the cloud-aws plugin should only need ec2:DescribeInstances. Is that correct?
> 
> Cheers,  
> David.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:09am UTC](https://discuss.elastic.co/t/aws-actions-required-for-cloud-aws-plugin/4154/3 "2017-07-06T04:09:20Z")

</div>