udondan/iam-floyd

import { Statement } from '..';

/**
 * Allows stopping EC2 instance only for the user who started them
 *
 * @param tag The tag name, where the user information will be stored - default: `Owner`
 */

export function allowEc2InstanceDeleteByOwner(tag?: string) {
  const tagName = tag ?? 'Owner';
  return [
    new Statement.Ec2()
      .allow()
      .toStartInstances()
      .ifAwsRequestTag(tagName, '${aws:username}'),
    new Statement.Ec2()
      .allow()
      .toStopInstances()
      .ifResourceTag(tagName, '${aws:username}'),
  ];
}