{
"Version": "2012-10-17",
"Statement": [
    {
        "Effect": "Allow",
        "Action": [
            "ec2:*Vpc*",
            "ec2:*Subnet*",
            "ec2:*Gateway*",
            "ec2:*Vpn*",
            "ec2:*Route*",
            "ec2:*Address*",
            "ec2:*SecurityGroup*",
            "ec2:*NetworkAcl*",
            "ec2:*DhcpOptions*",
            "ec2:RunInstances",
            "ec2:StopInstances",
            "ec2:StartInstances",
            "ec2:TerminateInstances",
            "ec2:Describe*"
        ],
        "Resource": "*",
        "Condition": {
            "StringEquals": {
                "ec2:Vpc": "arn:aws:ec2:region:account:vpc/vpc-id"
            }
        }
    }
 ]
}