AWS EC2 restrict IAM user to only launch instances and view those he created

Question

I have an AWS account with a few existing EC2 instances

I need to provide access to an employee in our company but limited to:

1. Creating and launching new ec2