{
	"Statement": [
	{
		"Effect":"Allow",
		"Action":"iam:getUser",
		"Resource":"*"
	},
	{
		"Effect":"Allow",
		"Action":[
			"ec2:describeInstances",
			"ec2:describeVolumes",
			"ec2:describeKeyPairs",
			"ec2:describeSubnets",
			"ec2:describeImages",
			"ec2:runInstances",
			"ec2:createTags",
			"ec2:terminateInstances",
			"ec2:describeSecurityGroups",
			"ec2:createVolume",
			"ec2:deleteVolume",
			"ec2:describeInstanceAttribute",
			"ec2:createImage",
			"ec2:describeImages",
			"ec2:deregisterImage",
			"ec2:createSnapshot",
			"ec2:describeSnapshots",
			"ec2:deleteSnapshot",
			"ec2:attachVolume",
			"ec2:detachVolume",
			"ec2:startInstances",
			"ec2:stopInstances",
			"ec2:getPasswordData"
		],
		"Resource":"*"
	},
	{
		"Effect":"Allow",
		"Action":"cloudwatch:GetMetricStatistics",
		"Resource":"*"
	}]
}
