Minimum IAM permissions for the nOps platform

{
	"Version": "2012-10-17",
	"Statement": [
	    {
			"Sid": "VisualEditor1",
			"Effect": "Allow",
			"Action": "s3:*",
			"Resource": [
				"arn:aws:s3:::[INSERT CUR S3 BUCKET]",
				"arn:aws:s3:::[INSERT CUR S3 BUCKET]/*"
			]
		},
		{
			"Sid": "VisualEditor0",
			"Effect": "Allow",
			"Action": [
				"organizations:InviteAccountToOrganization",
				"tag:GetResources",
				"ec2:DescribeInstances",
				"rds:DescribeDbClusters",
				"s3:ListBucket",
				"cloudwatch:GetMetricStatistics",
				"cur:PutReportDefinition",
				"rds:DescribeDbInstances",
				"cur:DeleteReportDefinition",
				"ec2:DescribeSecurityGroups",
				"eks:DescribeNodegroup",
				"ec2:DescribeNetworkInterfaces",
				"autoscaling:DescribeAutoScalingGroups",
				"ec2:DescribeVpcs",
				"ec2:DescribeVolumes",
				"eks:DescribeCluster",
				"ec2:DescribeReservedInstances",
				"eks:ListClusters",
				"ce:*",
				"ec2:DescribeSubnets",
				"cur:DescribeReportDefinitions"
			],
			"Resource": "*"
		}
	]
}