I would like to:
- Create an IAM user
- Restrict that user to be able to have full management over a single EC2 Instance only.
Example: While the AWS EC2 account has 10 instances, the new user, UserA, can start or stop InstanceA but can do nothing else on the account (No launching of instances, no messing with volumes, etc).
Is there a simple method for giving a single user full access to a single resource like this, but no access to anything else?