IAM allows the user to access everything for ec2 in the region

Question

I am trying to allow one user to perform all actions on us-west-2, this is my policy.

{ "Version": "2012-10-17", "Statement": [{ "Effect": "Allow", "Action": ["ec2:*"], "Resource": "arn:aws:ec2:us-west-2:837625274593:*" } ] } 

I got the account number from the "OWNER" parameter in the instance, but not sure what it is.

Answer 1

 { "Statement": [ { "Sid": "Stmt1375943389569", "Action": "ec2:*", "Effect": "Allow", "Resource": "*", "Condition": { "StringEquals": { "ec2:Region": "us-west-2" } } } ] } 

This should allow the user to access ec2 only in the us-west-2 area