ec2-policy.json

{
   "Version": "2012-10-17",
   "Statement": [
       {
           "Effect": "Allow",
           "Action": [
               "ec2:DescribeInstances",
               "ec2:DescribeImages",
               "ec2:DescribeKeyPairs",
               "ec2:DescribeVpcs",
               "ec2:DescribeSubnets",
               "ec2:DescribeSecurityGroups",
               "ec2:DescribeVolumes",
               "ec2:DescribeAvailabilityZones",
               "ec2:CreateVolume",
               "ec2:AttachVolume",
               "ec2:DetachVolume",
               "ec2:DescribeSnapshots",
               "ec2:DescribeAddresses",
               "ec2:AllocateAddress",
               "ec2:DescribeInstances",
               "ec2:AssociateAddress",
               "ec2:DescribeInstanceStatus",
               "ec2:StartInstances",
               "ec2:AssociateIamInstanceProfile",
                "ec2:DisassociateIamInstanceProfile",
                "ec2:GetConsoleScreenshot",
                "ec2:ReplaceIamInstanceProfileAssociation",
                "ec2:CreateKeyPair",
                "ec2:CreateSecurityGroup",
                "ec2:AuthorizeSecurityGroupEgress",
                "ec2:AuthorizeSecurityGroupIngress",
                "ec2:RevokeSecurityGroupEgress",
                "ec2:RevokeSecurityGroupIngress",
                "ec2:GetConsole*",
                "ec2:Describe*"
           ],
           "Resource": "*",
           "Condition":{
               "StringEquals":{
               "ec2:Region":"us-east-1"
        }
           }
         },
           {
            "Effect": "Allow",
            "Action": "ec2:RunInstances",
            "Resource": [
               "arn:aws:ec2:*:*:subnet/subnet-3683ad7f",
               "arn:aws:ec2:*:*:network-interface/*",
               "arn:aws:ec2:*:*:instance/*",
               "arn:aws:ec2:*:*:volume/*",
               "arn:aws:ec2:*::image/ami-*",
               "arn:aws:ec2:*:*:key-pair/*",
               "arn:aws:ec2:*:*:security-group/*"
           ],
           "Condition":{
              "StringEquals":{
              "ec2:Region":"us-east-1"
        }
           }
     
          }
          
         ]
   }