Note that we are also including the ec2:DescribeInstances and ec2:DescribeInstanceStatus, because in our code we output a debug message that clearly shows some information about the target instance, but this is not needed per se in order to start it or stop it.