iam policy.json

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor1",
            "Effect": "Deny",
            "Action": [
                "route53domains:TransferDomain",
                "elasticache:PurchaseReservedCacheNodesOffering",
                "importexport:*",
                "rds:PurchaseReservedDBInstancesOffering",
                "devicefarm:ScheduleRun",
                "elasticache:DescribeReservedCacheNodesOfferings",
                "ec2:ModifySpotFleetRequest",
                "iam:SimulateCustomPolicy",
                "iam:DetachGroupPolicy",
                "ec2:DescribeReservedInstancesListings",
                "iam:PutGroupPolicy",
                "ec2:CreateReservedInstancesListing",
                "ec2:DescribeSpotFleetRequestHistory",
                "rds:DescribeReservedDBInstances",
                "ec2:CancelSpotInstanceRequests",
                "iam:UpdateServerCertificate",
                "ec2:DescribeReservedInstancesModifications",
                "ce:*",
                "ec2:DeleteSpotDatafeedSubscription",
                "devicefarm:UpdateDevicePool",
                "ec2:RequestSpotFleet",
                "ec2:DescribeSpotInstanceRequests",
                "rds:DescribeReservedDBInstancesOfferings",
                "devicefarm:PurchaseOffering",
                "ec2:CreateSpotDatafeedSubscription",
                "iam:ResyncMFADevice",
                "iam:DeleteAccountAlias",
                "iam:UpdateSAMLProvider",
                "ec2:ModifyReservedInstances",
                "iam:DeleteInstanceProfile",
                "iam:DeleteUser",
                "iam:AttachGroupPolicy",
                "iam:PutUserPolicy",
                "iam:Set'arn:aws:iam::156962844638:role/democdbtrack'PolicyVersion",
                "elasticache:DescribeReservedCacheNodes",
                "savingsplans:*",
                "iam:DeleteGroup",
                "route53domains:RenewDomain",
                "waf-regional:List*",
                "devicefarm:RenewOffering",
                "ec2:GetHostReservationPurchasePreview",
                "iam:UpdateGroup",
                "iam:CreateLoginProfile",
                "iam:SimulatePrincipalPolicy",
                "ec2:DescribeSpotDatafeedSubscription",
                "iam:CreateAccountAlias",
                "ec2:DescribeReservedInstances",
                "iam:DetachUserPolicy",
                "iam:UpdateLoginProfile",
                "iam:UpdateUser",
                "ec2:DescribeReservedInstancesOfferings",
                "iam:DeleteUserPolicy",
                "iam:AttachUserPolicy",
                "ec2:GetReservedInstancesExchangeQuote",
                "iam:DeleteSigningCertificate",
                "iam:UpdateAccountPasswordPolicy",
                "route53domains:RegisterDomain",
                "ec2:RequestSpotInstances",
                "ec2:PurchaseReservedInstancesOffering",
                "ec2:CancelSpotFleetRequests",
                "iam:DeletePolicy",
                "aws-marketplace:Subscribe",
                "iam:CreateVirtualMFADevice",
                "ec2:DescribeSpotPriceHistory",
                "iam:RemoveUserFromGroup",
                "iam:CreatePolicyVersion",
                "iam:DeleteLoginProfile",
                "iam:UploadSigningCertificate",
                "iam:DeleteAccountPasswordPolicy",
                "ec2:DescribeSpotFleetRequests",
                "ec2:DescribeSpotFleetInstances",
                "ec2:AcceptReservedInstancesExchangeQuote",
                "iam:DeleteGroupPolicy",
                "ec2:CancelReservedInstancesListing",
                "iam:DeletePolicyVersion"
            ],
            "Resource": "*"
        },
        {
            "Sid": "limitedSize",
            "Effect": "Deny",
            "Action": "ec2:*",
            "Resource": "*",
            "Condition": {
                "ForAnyValue:StringNotLike": {
                    "ec2:InstanceType": [
                        "*.nano",
                        "*.small",
                        "*.micro",
                        "*.medium"
                    ]
                }
            }
        }
    ]
}