Some Amazon EC2 API actions allow you to include specific resources in your policy that can becreated or modified by the action. To specify a resource in the statement, you need to use itsAmazon Resource Name (ARN). Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-ug.pd