{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "ec2:DescribeInstances",
                "ec2:DescribeVolumesModifications",
                "ecr:ListTagsForResource",
                "ecr:ListImages",
                "ec2:DescribeNetworkInterfaces",
                "ec2:DescribeVolumes",
                "ecr:DescribeRepositories",
                "ec2:UnassignPrivateIpAddresses",
                "ec2:DescribeRouteTables",
                "ecr:BatchCheckLayerAvailability",
                "ecr:GetLifecyclePolicy",
                "ecr:DescribeImageScanFindings",
                "ec2:DetachNetworkInterface",
                "ecr:GetLifecyclePolicyPreview",
                "ec2:DescribeTags",
                "ecr:GetDownloadUrlForLayer",
                "ec2:ModifyNetworkInterfaceAttribute",
                "ec2:DeleteNetworkInterface",
                "ecr:GetAuthorizationToken",
                "ec2:AssignPrivateIpAddresses",
                "ec2:DescribeSecurityGroups",
                "ec2:CreateNetworkInterface",
                "ec2:DescribeVpcs",
                "ecr:BatchGetImage",
                "ecr:DescribeImages",
                "ec2:DescribeInstanceTypes",
                "ec2:AttachNetworkInterface",
                "eks:DescribeCluster",
                "ec2:DescribeSubnets",
                "ecr:GetRepositoryPolicy"
            ],
            "Resource": "*"
        },
        {
            "Sid": "VisualEditor1",
            "Effect": "Allow",
            "Action": "ec2:CreateTags",
            "Resource": "arn:aws:ec2:*:*:network-interface/*"
        }
    ]
}