Dell APEX Navigator for Multicloud Storage Using Your Service

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "APEXFileStorageNewVPC",
      "Effect": "Allow",
      "Action": [
        "ec2:AssociateVpcCidrBlock",
        "ec2:AttachInternetGateway",
        "ec2:CreateInternetGateway",
        "ec2:CreateVpc",
        "ec2:DeleteInternetGateway",
        "ec2:DeleteVpc",
        "ec2:DetachInternetGateway",
        "ec2:DisassociateVpcCidrBlock",
        "ec2:ModifyVpcAttribute"
      ],
      "Resource": "*"
    },
    {
      "Sid": "APEXFileStorageDeploy",
      "Effect": "Allow",
      "Action": [
        "ec2:AssociateIamInstanceProfile",
        "ec2:AuthorizeSecurityGroupIngress",
        "ec2:CreateKeyPair",
        "ec2:CreateNetworkInterface",
        "ec2:CreatePlacementGroup",
        "ec2:CreateSecurityGroup",
        "ec2:CreateSubnet",
        "ec2:CreateTags",
        "ec2:DescribeAvailabilityZones",
        "ec2:DescribeImages",
        "ec2:DescribeInstanceStatus",
        "ec2:DescribeInstanceTypeOfferings",
        "ec2:DescribeInstanceTypes",
        "ec2:DescribeNetworkInterfaces",
        "ec2:DescribeSecurityGroups",
        "ec2:DescribeSubnets",
        "ec2:DescribeVolumes",
        "ec2:DescribeVpcEndpoints",
        "ec2:DescribeVpcAttribute",
        "ec2:DescribeVpcs",
        "ec2:GetEbsEncryptionByDefault",
        "ec2:ModifyNetworkInterfaceAttribute",
        "ec2:RunInstances",
        "ec2:StartInstances",
        "ec2:StopInstances",
        "kms:CreateGrant",
        "kms:Decrypt",
        "kms:DescribeKey",
        "kms:GenerateDataKeyWithoutPlaintext",
        "ReEncrypt",
        "secretsmanager:CreateSecret",
        "secretsmanager:DeleteSecret",
        "servicequotas:ListAWSDefaultServiceQuotas",
        "servicequotas:ListServiceQuotas"
      ],
      "Resource": "*"
    },
    {
      "Sid": "APEXFileInstanceProfileCheck",
      "Effect": "Allow",
      "Action": [
        "iam:GetPolicyVersion",
        "iam:ListAttachedRolePolicies",
        "iam:GetPolicy"
      ],
      "Resource": "arn:aws:iam::*:*"
    },
    {
      "Sid": "APEXFileSmartConnectNetworkingAccess",
      "Effect": "Allow",
      "Action": "iam:PassRole",
      "Resource": "arn:aws:iam::*:*",
      "Condition": {
        "StringLikeIfExists": {
          "iam:PassedToService": "ec2.amazonaws.com"
        }
      }
    },
    {
      "Sid": "APEXFileStorageDecommission",
      "Effect": "Allow",
      "Action": [
        "ec2:DeleteKeyPair",
        "ec2:DeleteNetworkInterface",
        "ec2:DeletePlacementGroup",
        "ec2:DeleteSecurityGroup",
        "ec2:DeleteSubnet",
        "ec2:TerminateInstances"
      ],
      "Resource": "*"
    },
    {
      "Sid": "APEXNavigatorAccess",
      "Effect": "Allow",
      "Action": [
        "iam:ListAccountAliases",
        "sts:SetSourceIdentity",
        "sts:TagSession"
      ],
      "Resource": "*"
    },
    {
      "Sid": "APEXNavigatorMonitor",
      "Effect": "Allow",
      "Action": [
        "ec2:DescribeInstances",
        "ec2:DescribeVolumes",
        "ec2:DescribeVpcs"
      ],
      "Resource": "*"
    },
    {
      "Sid": "SCGNetworking",
      "Effect": "Allow",
      "Action": [
        "ec2:AllocateAddress",
        "ec2:AssociateAddress",
        "ec2:AssociateRouteTable",
        "ec2:AuthorizeSecurityGroupEgress",
        "ec2:CreateRoute",
        "ec2:CreateRouteTable",
        "ec2:DeleteRoute",
        "ec2:DeleteRouteTable",
        "ec2:DescribeInternetGateways",
        "ec2:DisassociateRouteTable",
        "ec2:ModifyInstanceAttribute",
        "ec2:ReleaseAddress",
        "ec2:DescribeRouteTables"
      ],
      "Resource": "*"
    }
  ]
}