{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowThisAccount",
      "Effect": "Allow",
      "Action": [
        "SNS:Subscribe",
        "SNS:SetTopicAttributes",
        "SNS:RemovePermission",
        "SNS:ListSubscriptionsByTopic",
        "SNS:GetTopicAttributes",
        "SNS:DeleteTopic",
        "SNS:AddPermission"
      ],
      "Resource": "${SNS_TOPIC_ARN}",
      "Principal": {
        "AWS": "${CUSTOMER_ACCOUNT}"
      }
    },
    {
      "Sid": "AllowSendingResults",
      "Effect": "Allow",
      "Action": "sns:Publish",
      "Resource": "${SNS_TOPIC_ARN}",
      "Principal": {
        "AWS": "${WASTE_SCANNER_IAM_ROLE_ARN}"
      }
    }
  ]
}
