title: IAM policy to restrict users to instances in a specific VPC
body: <p>I am trying to make a <code>IAM policy</code> to restrict user access to all the instances in a specific <code>VPC</code>. Following policy I made but not working.</p>
  
  <pre><code>{
      "Version": "2012-10-17",
      "Statement": [
          {
              "Sid": "Stmt1450441260778",
              "Action": "ec2:*",
              "Effect": "Allow",
              "Resource": "arn:aws:ec2:region:Account_num:vpc/vpc-id"
          }
      ]
  }
  </code></pre>
  
  <p>I have filled the corresponding <code>account_num</code> and <code>vpc-id</code> in the policy.</p>