Limit ec2 permissions for CI users

Right now, the "ci" AWS user has full ec2 access, we should limit the permissions.