{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "ResourcesToSweep",
      "Effect": "Allow",
      "Action": [
        "s3:ListBucket",
        "s3:GetBucketLifecycle",
        "ec2:DescribeVolumes",
        "ec2:DescribeSnapshots",
        "ec2:DescribeInstances",
        "ec2:DescribeImages",
        "ec2:DescribeAddresses"
      ],
      "Resource": "*"
    },
    {
      "Sid": "AccessConfiguration",
      "Effect": "Allow",
      "Action": "s3:GetObject",
      "Resource": [
        "arn:aws:s3:::${CUSTOMER_CONFIG_BUCKET_NAME}/*",
        "arn:aws:s3:::${CUSTOMER_CONFIG_BUCKET_NAME}"
      ]
    },
    {
      "Sid": "GetConfigurationLocation",
      "Effect": "Allow",
      "Action": [
        "ssm:GetParameters",
        "ssm:GetParameter"
      ],
      "Resource": "arn:aws:ssm:us-east-2:${CUSTOMER_ACCOUNT}:parameter/waste-scanner/*"
    }
  ]
}