About that AmazonEC2FullAccess requirement

I was wondering how you would justify such a far-ranging authorization policy. In the code I only see ec2.describeInstances() and ec2.terminateInstances() being used. From what I can see, if I give those two -- and only those -- to my Lambda, it will work. So why would you say that full access is required?

The issue names ec2.describeInstances() and ec2.terminateInstances() but no file or test. Start by locating where the AmazonEC2FullAccess requirement is defined, compare it with those calls, and verify the Lambda with only the narrower permissions. Done means the requirement is justified or narrowed and documented.

Written by the indexing model from the issue text.