title: how to create a policy of ec2 cloudformation with instancetype t2.micro
body: <p>I am trying to create a policy where some user can lauch instance with amid:ami-0fc61db8544a617ed specific and instancetype:t2.micro in a specific region with specific storage like 8gb
  I have this template</p>
  
  <pre><code>AWSTemplateFormatVersion: 2010-09-09
      Description: ---
        Policita para usuarios test
      Parameters:
        GroupTest1Parameter:
          Type: String
          Default: GroupTest1
          Description: Este es el valor de entrada GroupTest1Parameter
      Resources:
        PolictyTest1:
          Type: AWS::IAM::Policy
          Properties:
            PolicyName: PolictyTest1
            Groups:
              - Fn::ImportValue: !Sub "${GroupTest1Parameter}-VPCID"
            PolicyDocument:
              Version: '2012-10-17'
              Statement:
                - Effect: Allow
                  Action:
                    - 'ec2:RunInstances'
                    - 'cloudformation:Describe*'
                    - 'cloudformation:List*'
                    - 'cloudformation:Get*'
                  Resource: 'arn:aws:ec2:*:*:instance/*'
                  # Condition:
                  #   StringEquals: 
                  #     ec2:ImageType: ami-0fc61db8544a617ed
      Outputs:
        PolictyTest1:
          Description: politica que deniega
          Value: !Ref PolictyTest1
          Export:
            Name: !Sub "${AWS::StackName}-VPCID"
  </code></pre>
  
  <p>But it does not work. The template creates fine, but when I am trying to test te policy by using a user test related to this policy, he can not lauch instances of ec2 
  I am reading
  <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonec2.html#amazonec2-actions-as-permissions" rel="nofollow noreferrer">https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonec2.html#amazonec2-actions-as-permissions</a></p>