Per-image permissions for custom images

You can now write IAM policy that restricts the ability for users to create instances from custom images on an image-by-image basis. For more information, see Managing Custom Images.