How to edit AMI permission
AWS AMI Permission – Quick Reminder
An Amazon Machine Image (AMI) is like a template used to launch EC2 instances.
AMI permissions control who can use your AMI to launch instances.
Permission Types:
- Private – Only the AMI owner can launch instances. (Best for personal or internal use)
- Public – Everyone on AWS can use it. (Be careful – clean sensitive data before making public)
Usage Tip:
- Use Private for security.
- Use Public only if you want to distribute an AMI widely and safely.
Security Note:
- Always remove sensitive data before sharing.
For encrypted AMIs, also share the KMS key permissions.
Document link : https://docs.aws.amazon.com/toolkit-for-visual-studio/latest/user-guide/tkv-set-ami-launch-perms.html
1. Log in to your AWS account and navigate to the EC2 service to perform this operation.
2. After logging in, open the AWS AMI section and select the correct AMI.
3. Then click the Actions button, locate the ‘Edit AMI Permissions’ option, and select it.
4. You will then see two types of permissions available: Public and Private.
5. Then, choose the permission type according to your requirements .
6. Steps to Edit AMI Permissions in AWS Console
Click Save changes.
Log in to the AWS Management Console.
Open the EC2 Service.
From the left-side menu, choose AMIs.
Select the AMI you want to edit.
Click Actions → Edit AMI permissions.
You will see two options:
Public – Allows all AWS accounts to use the AMI (risky).
Private – Allows only specific AWS account IDs to use the AMI.
In the Add account ID field, enter the AWS account IDs you want to grant permission to.
END