title: Amazon EC2 IAM Policy: Restrict to modifying single security group
body: <p>I am trying to create an IAM Policy in Amazon AWS which will allow access to view or edit/modify a single security group. I have followed the AWS documentation, but am unsuccessfully able to make this policy work. The policy created is below:</p>
  
  <pre><code>    {
      "Version": "2012-10-17",
      "Statement": [
          {
              "Sid": "Stmt123456789123",
              "Effect": "Allow",
              "Action": [
                  "ec2:DescribeSecurityGroups",
                  "ec2:*"
              ],
              "Resource": [
                  "arn:aws:ec2:us-east-1:000000000000:security-group/sg-a123a1a1"
              ]
          }
      ]
  }
  </code></pre>
  
  <p>Yes, I do realize that I have a redundant action, but I noticed you are able to specify Describe Security Group, but no option for Modify; therefore "*" was my only option; Thankfully, the resource should allow me to restrict this action to a single security group.</p>