{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "s3:*",
                "logs:*",
                "cloudformation:*",
                "elasticloadbalancing:*",
                "autoscaling:*",
                "iam:*",
                "cloudwatch:*",
                "kms:*",
                "ssm:*",
                "lambda:*",
                "route53:*",
                "ec2:*",
                "ecr:*",
                "eks:*",
                "events:*"
            ],
            "Resource": "*"
        },
        {
            "Sid": "VisualEditor1",
            "Effect": "Allow",
            "Action": [
                "wafv2:ListTagsForResource",
                "wafv2:DeleteWebACL",
                "wafv2:UpdateWebACL",
                "wafv2:GetWebACL",
                "wafv2:CreateWebACL",
                "wafv2:ListWebACLs",
                "wafv2:UpdateWebACL",
                "wafv2:ListRuleGroups",
                "wafv2:GetIPSet",
                "wafv2:ListIPSets",
                "wafv2:CreateIPSet",
                "wafv2:DeleteIPSet",
                "wafv2:UpdateIPSet",
                "acm:RenewCertificate",
                "acm:ListTagsForCertificate",
                "acm:GetCertificate",
                "acm:ImportCertificate",
                "acm:DeleteCertificate",
                "acm:DescribeCertificate",
                "acm:AddTagsToCertificate",
                "acm:RequestCertificate",
                "acm:ListCertificates"
            ],
            "Resource": [
                "arn:aws:acm:*:552185537300:certificate/*",
                "arn:aws:wafv2:*:552185537300:*/ipset/*/*",
                "arn:aws:wafv2:*:552185537300:*/webacl/*/*",
                "arn:aws:wafv2:*:552185537300:*/rulegroup/*/*"
            ]
        },
        {
            "Sid": "VisualEditor2",
            "Effect": "Allow",
            "Action": [
                "route53-recovery-control-config:ListControlPanels",
                "route53domains:*",
                "route53domains:ListDomains",
                "route53-recovery-readiness:ListReadinessChecks",
                "route53domains:ListOperations"
            ],
            "Resource": "*"
        }
    ]
}