I have been working on a boto script for creating an IAM user policy from a function. I want to add the region, instance_type and ebs_volume restriction, inside the policy.