title: How to allow AWS user to start instances only in one VPC by ID or TAG?
body: <p>I have multiple VPCs, one for each environment. I want that a user in Dev group should only be able to launch instances in that one VPC. Similarly for other environments as well. How to accomplish this ? Right now, I can restrict user to not be able to stop, start instances based on Tag (Environment=Dev).</p>
  
  <p>Is it possible to have such a policy, that would allow to launch an Instance only in a particular VPC or a VPC with a particular tag?</p>