{
    "Version": "1",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "sts:AssumeRole",
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "kms:Encrypt",
                "kms:Decrypt",
                "kms:GenerateDataKey",
                "kms:DescribeKey",
                "kms:DescribeKeyVersion",
                "kms:ListKeyVersions"
            ],
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "ecs:DescribeDisks",
                "ecs:DescribeTasks",
                "ecs:DescribeInstanceAttribute",
                "ecs:DescribeInstanceTypes",
                "ebs:DescribeEvents"
            ],
            "Resource": "*"
        }
    ]
}