{
    "Version": "2012-10-17",
    "Statement": [
      {
        "Sid": "AllowCustodianToActOnEc2Instances",
        "Action": [
          "ec2:CreateTags",
          "ec2:DeleteTags",
          "ec2:DescribeInstances",
          "ec2:TerminateInstances",
          "ec2:DescribeVolumes"
        ],
        "Effect": "Allow",
        "Resource": "*"
      },
      {
        "Sid": "AllowCustodianToLogLambdaActions",
        "Action": [
          "logs:CreateLogGroup",
          "logs:CreateLogStream",
          "logs:PutLogEvents"
        ],
        "Effect": "Allow",
        "Resource": "*"
      }
    ]
  }