Auto Scaling Control Access

• credentials are needed to access EC2 Auto Scaling 
• credentials must have permissions to perform actions.
• Can use Identity and Access Management (IAM)
• By default, new IAM user has no permissions to do anything.
• To grant permissions, attach IAM policy to the IAM users or groups that require the permissions
• Can also create own policies to specify allowed or denied actions and resources, also conditions for same

EC2 Auto Scaling service-linked roles types

• The default service-linked role for your account, named AWSServiceRoleForAutoScaling. This role is automatically assigned to your Auto Scaling groups unless you specify a different service-linked role.
• A service-linked role with a custom suffix that you specify when you create the role, for example, AWSServiceRoleForAutoScaling_mysuffix.