Minimal Policy for Global Accelerator creation

Created 08/28/2026 08:53 · Last modified 08/31/2026 17:53

Provides the bare minimum permissions for an IAM user to be able to Create/Update an AWS Global Accelerator

```
  AcceleratorPolicy:
    Type: AWS::IAM::ManagedPolicy
    Properties:
      PolicyDocument:
        Version: "2012-10-17"
        Statement:
          -
            Sid: AcceleratorAccess
            Action:
              - globalaccelerator:CreateAccelerator
              - globalaccelerator:UpdateAccelerator
              - globalaccelerator:CreateEndpointGroup
              - globalaccelerator:UpdateEndpointGroup
              - globalaccelerator:CreateListener
              - globalaccelerator:UpdateListener
              - globalaccelerator:TagResource
              - globalaccelerator:UntagResource
              - globalaccelerator:DescribeAccelerator
              - globalaccelerator:DescribeAcceleratorAttributes
              - globalaccelerator:DescribeEndpointGroup
              - globalaccelerator:DescribeListener
            Effect: Allow
            Resource:
            - !Sub 'arn:aws:globalaccelerator::${AWS::AccountId}:accelerator/*'
      ManagedPolicyName: AcceleratorPolicy
			```

Back to Notes