This policy restricts an IAM user to perform start and stop actions only on instances having their IDs specified in the Resource attribute of the policy.
In order to further restrict the actions that can be performed, additional actions like “ec2:TerminateInstances” can be added.
Comments