{
  "Version": "2012-10-17",
  "Statement": [
      {
          "Effect": "Allow",
          "Action": [
              "acm:DeleteCertificate",
              "acm:DescribeCertificate",
              "acm:ImportCertificate",
              "acm:ListTagsForCertificate",
              "acm:AddTagsToCertificate",
              "acm:RemoveTagsFromCertificate"
          ],
          "Resource": "*"
      },
      {
          "Effect": "Allow",
          "Action": [
              "autoscaling:DeleteLifecycleHook",
              "autoscaling:DescribeLifecycleHooks",
              "autoscaling:PutLifecycleHook",
              "autoscaling:DescribeTags",
              "autoscaling:CreateOrUpdateTags",
              "autoscaling:DeleteTags"
          ],
          "Resource": "*"
      },
      {
          "Effect": "Allow",
          "Action": [
              "ec2:AllocateAddress",
              "ec2:AssociateAddress",
              "ec2:AssociateRouteTable",
              "ec2:AttachInternetGateway",
              "ec2:AuthorizeSecurityGroupEgress",
              "ec2:AuthorizeSecurityGroupIngress",
              "ec2:CreateInternetGateway",
              "ec2:CreateLaunchTemplateVersion",
              "ec2:CreateNatGateway",
              "ec2:CreateRoute",
              "ec2:CreateRouteTable",
              "ec2:CreateSecurityGroup",
              "ec2:CreateSubnet",
              "ec2:CreateVpc",
              "ec2:CreateVpcEndpoint",
              "ec2:DeleteInternetGateway",
              "ec2:DeleteKeyPair",
              "ec2:DeleteLaunchTemplate",
              "ec2:DeleteNatGateway",
              "ec2:DeleteRouteTable",
              "ec2:DeleteSecurityGroup",
              "ec2:DeleteSubnet",
              "ec2:DeleteVpc",
              "ec2:DeleteVpcEndpoints",
              "ec2:DescribeAddresses",
              "ec2:DescribeAddressesAttribute",
              "ec2:DescribeAvailabilityZones",
              "ec2:DescribeInstanceCreditSpecifications",
              "ec2:DescribeInstanceTypes",
              "ec2:DescribeInternetGateways",
              "ec2:DescribeKeyPairs",
              "ec2:DescribeNatGateways",
              "ec2:DescribeNetworkAcls",
              "ec2:DescribeNetworkInterfaces",
              "ec2:DescribePrefixLists",
              "ec2:DescribeRouteTables",
              "ec2:DescribeSecurityGroupRules",
              "ec2:DescribeSecurityGroups",
              "ec2:DescribeVolumes",
              "ec2:DescribeVpcAttribute",
              "ec2:DescribeVpcEndpoints",
              "ec2:DescribeVpcs",
              "ec2:DetachInternetGateway",
              "ec2:DetachNetworkInterface",
              "ec2:DisassociateAddress",
              "ec2:DisassociateRouteTable",
              "ec2:ImportKeyPair",
              "ec2:ModifyInstanceAttribute",
              "ec2:ModifyInstanceMetadataOptions",
              "ec2:ModifyVpcAttribute",
              "ec2:ReleaseAddress",
              "ec2:RevokeSecurityGroupEgress",
              "ec2:RevokeSecurityGroupIngress",
              "ec2:RunInstances",
              "ec2:StartInstances",
              "ec2:DescribeTags",
              "ec2:AssociateVerifiedAccessInstanceWebAcl",
              "ec2:CreateCoipPoolPermission",
              "ec2:CreateLaunchTemplate",
              "ec2:CreateLocalGatewayRouteTablePermission",
              "ec2:CreateSnapshot",
              "ec2:CreateTags",
              "ec2:DeleteCoipPoolPermission",
              "ec2:DeleteLocalGatewayRouteTablePermission",
              "ec2:DeleteResourcePolicy",
              "ec2:DeleteSnapshot",
              "ec2:DeleteTags",
              "ec2:DescribeCapacityBlockOfferings",
              "ec2:DescribeImages",
              "ec2:DescribeInstanceAttribute",
              "ec2:DescribeInstanceStatus",
              "ec2:DescribeInstanceTypeOfferings",
              "ec2:DescribeInstances",
              "ec2:DescribeLaunchTemplateVersions",
              "ec2:DescribeLaunchTemplates",
              "ec2:DescribeLocalGatewayRouteTablePermissions",
              "ec2:DescribeSnapshots",
              "ec2:DescribeSubnets",
              "ec2:DescribeVerifiedAccessInstanceWebAclAssociations",
              "ec2:DisassociateVerifiedAccessInstanceWebAcl",
              "ec2:GetResourcePolicy",
              "ec2:GetVerifiedAccessInstanceWebAcl",
              "ec2:ImportByoipCidrToIpam",
              "ec2:InjectApiError",
              "ec2:PauseVolumeIO",
              "ec2:PurchaseCapacityBlock",
              "ec2:PutResourcePolicy",
              "ec2:SendSpotInstanceInterruptions",
              "ec2:StopInstances",
              "ec2:TerminateInstances"
          ],
          "Resource": "*"
      },
      {
          "Effect": "Allow",
          "Action": [
              "ecs:CreateCluster",
              "ecs:CreateService",
              "ecs:DeleteCluster",
              "ecs:DeleteService",
              "ecs:DeregisterTaskDefinition",
              "ecs:DescribeClusters",
              "ecs:DescribeServices",
              "ecs:DescribeTaskDefinition",
              "ecs:PutClusterCapacityProviders",
              "ecs:RegisterTaskDefinition",
              "ecs:UpdateService",
              "ecs:ListTagsForResource",
              "ecs:TagResource",
              "ecs:UntagResource"
          ],
          "Resource": "*"
      },
      {
          "Effect": "Allow",
          "Action": [
              "eks:CreateAddon",
              "eks:CreateCluster",
              "eks:CreateNodegroup",
              "eks:DeleteAddon",
              "eks:DeleteCluster",
              "eks:DeleteNodegroup",
              "eks:DescribeAddon",
              "eks:DescribeCluster",
              "eks:DescribeNodegroup",
              "eks:DescribeUpdate",
              "eks:ListClusters",
              "eks:UpdateAddon",
              "eks:UpdateClusterConfig",
              "eks:UpdateClusterVersion",
              "eks:UpdateNodegroupConfig",
              "eks:UpdateNodegroupVersion",
              "eks:ListTagsForResource",
              "eks:TagResource",
              "eks:UntagResource"
          ],
          "Resource": "*"
      },
      {
          "Effect": "Allow",
          "Action": [
              "elasticfilesystem:CreateFileSystem",
              "elasticfilesystem:CreateMountTarget",
              "elasticfilesystem:DeleteFileSystem",
              "elasticfilesystem:DeleteMountTarget",
              "elasticfilesystem:DescribeFileSystems",
              "elasticfilesystem:DescribeLifecycleConfiguration",
              "elasticfilesystem:DescribeMountTargetSecurityGroups",
              "elasticfilesystem:DescribeMountTargets",
              "elasticfilesystem:PutLifecycleConfiguration",
              "elasticfilesystem:DescribeTags",
              "elasticfilesystem:ListTagsForResource",
              "elasticfilesystem:CreateTags",
              "elasticfilesystem:DeleteTags",
              "elasticfilesystem:TagResource",
              "elasticfilesystem:UntagResource"
          ],
          "Resource": "*"
      },
      {
          "Effect": "Allow",
          "Action": [
              "elasticloadbalancing:CreateListener",
              "elasticloadbalancing:CreateLoadBalancer",
              "elasticloadbalancing:CreateRule",
              "elasticloadbalancing:CreateTargetGroup",
              "elasticloadbalancing:DeleteListener",
              "elasticloadbalancing:DeleteLoadBalancer",
              "elasticloadbalancing:DeleteRule",
              "elasticloadbalancing:DeleteTargetGroup",
              "elasticloadbalancing:DeregisterTargets",
              "elasticloadbalancing:DescribeListenerAttributes",
              "elasticloadbalancing:DescribeListeners",
              "elasticloadbalancing:DescribeLoadBalancerAttributes",
              "elasticloadbalancing:DescribeLoadBalancers",
              "elasticloadbalancing:DescribeRules",
              "elasticloadbalancing:DescribeTargetGroupAttributes",
              "elasticloadbalancing:DescribeTargetGroups",
              "elasticloadbalancing:DescribeTargetHealth",
              "elasticloadbalancing:ModifyListener",
              "elasticloadbalancing:ModifyLoadBalancerAttributes",
              "elasticloadbalancing:ModifyTargetGroupAttributes",
              "elasticloadbalancing:RegisterTargets",
              "elasticloadbalancing:SetSecurityGroups",
              "elasticloadbalancing:DescribeTags",
              "elasticloadbalancing:AddTags",
              "elasticloadbalancing:RemoveTags",
              "elasticloadbalancing:ModifyListenerAttributes",
              "elasticloadbalancing:SetWebACL"
          ],
          "Resource": "*"
      },
      {
          "Effect": "Allow",
          "Action": [
              "events:DeleteRule",
              "events:DescribeRule",
              "events:ListTargetsByRule",
              "events:PutRule",
              "events:PutTargets",
              "events:RemoveTargets",
              "events:ListTagsForResource",
              "events:TagResource",
              "events:UntagResource",
              "events:PutEvents"
          ],
          "Resource": "*"
      }
  ]
}