policy10-userspecific-ec2operation-iam.json

{
   "Version":"2012-10-17",
   "Statement":[
      {
         "Effect":"Allow",
         "Action":"ec2:Describe*",
         "Resource":"*"
      },
      {
         "Effect":"Allow",
         "Action":[
            "ec2:StartInstances",
            "ec2:StopInstances",
            "ec2:RebootInstances",
            "ec2:AttachVolume",
            "ec2:DetachVolume"
         ],
         "Resource":[
            "arn:aws:ec2:Region:AWSAccountID:instance/*",
            "arn:aws:ec2:Region:AWSAccountID:volume/*"
         ],
         "Condition":{
            "StringEquals":{
               "ec2:ResourceTag/role":"developer"
            }
         }
      }
   ]
}