{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "DescribeReadOnlyEc2Resources",
            "Effect": "Allow",
            "Action": [
                "ec2:DescribeAvailabilityZones",
                "ec2:DescribeRegions",
                "ec2:DescribeSecurityGroups",
                "ec2:DescribeTags",
                "ec2:DescribeVolumes"
            ],
            "Resource": [
                "*"
            ]
        },
        {
            "Sid": "EC2EBSActions",
            "Effect": "Allow",
            "Action": [
                "ec2:AttachVolume",
                "ec2:CreateVolume"
            ],
            "Resource": [
                "*"
            ],
            "Condition": {
                "StringEquals": {
                    "ec2:ResourceTag/RedisLabsIdentifier": "Redislabs-VPC"
                }
            }
        },
        {
            "Sid": "SecurityGroupAccessActions",
            "Effect": "Allow",
            "Action": [
                "ec2:AuthorizeSecurityGroupIngress",
                "ec2:DeleteSecurityGroup"
            ],
            "Resource": "*",
            "Condition": {
                "StringEquals": {
                    "ec2:ResourceTag/RedisLabsIdentifier": "Redislabs-VPC"
                }
            }
        },
        {
            "Sid": "TagResourcesCreation",
            "Effect": "Allow",
            "Action": [
                "ec2:CreateTags"
            ],
            "Resource": [
                "*"
            ]
        },
        {
          "Sid": "TagResourcesDelete",
          "Effect": "Allow",
          "Action": [
                "ec2:DeleteTags"
          ],
          "Resource": [
                "*"
          ],
          "Condition": {
              "StringEquals": {
                  "ec2:ResourceTag/RedisLabsIdentifier": "Redislabs-VPC"
              }
          }
        }
    ]
}