{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "ec2:Describe*",
                "ec2:ImportKeyPair",
                "ec2:CreateKeyPair",
                "ec2:CreateTags",
                "ec2:DeleteKeyPair",
                "ec2:CreateSecurityGroup",
                "ec2:AuthorizeSecurityGroupIngress"
            ],
            "Resource": "*"
        },
        {
            "Sid": "VisualEditor1",
            "Effect": "Allow",
            "Action": "ec2:RunInstances",
            "Resource": [
                "arn:aws:ec2:eu-west-3:<<AWS_ACCOUNT_ID>>:volume/*",
                "arn:aws:ec2:eu-west-3:<<AWS_ACCOUNT_ID>>:instance/*",
                "arn:aws:ec2:eu-west-3::image/ami-*",
                "arn:aws:ec2:eu-west-3:<<AWS_ACCOUNT_ID>>:key-pair/*",
                "arn:aws:ec2:eu-west-3:<<AWS_ACCOUNT_ID>>:network-interface/*",
                "arn:aws:ec2:eu-west-3:<<AWS_ACCOUNT_ID>>:subnet/*",
                "arn:aws:ec2:eu-west-3:<<AWS_ACCOUNT_ID>>:security-group/*",
                "arn:aws:ec2:eu-west-3:<<AWS_ACCOUNT_ID>>:placement-group/*"
            ]
        },
        {
            "Sid": "VisualEditor2",
            "Effect": "Allow",
            "Action": [
                "ec2:RebootInstances",
                "ec2:TerminateInstances",
                "ec2:StartInstances",
                "ec2:StopInstances"
            ],
            "Resource": "arn:aws:ec2:eu-west-3:<<AWS_ACCOUNT_ID>>:instance/*"
        }
    ]
}