Your policy failed because many EC2 APIs don't support resource-level permissions. Changing it to "Resource": "*" will fix the issue. If the policy is limited to a specific region, use a Condition. If you want to save time, simply attach the official policy: AmazonEC2FullAccess