IAM policy that can delete snapshot on AWS

I want to create an IAM policy that can delete snapshots with the Test stack tag.

I have tried my own version of the policy as such:

{
     "Version": "2012-10-17",
     "Statement": [
    {
        "Action": [
            "ec2:describe*"
        ],
        "Resource": [
            "*"
        ],
        "Effect": "Allow"
    },
    {
        "Action": [
            "ec2:DeleteSnapshot"
        ],
        "Condition": {
            "StringEquals": {
                "ec2:ResourceTag/Stack": "Test"
            }
        },
        "Resource": [
            "*"
        ],
        "Effect": "Allow"
    }
]

}

It doesn’t work. I get permission denied when I attempt to delete snapshot as a user who is a member of a group where this policy applies.
What is wrong?

- Sid: RestrictSnapshotActions
  Effect: Allow
  Action:
    - ec2:DeleteSnapshot
  Resource:
    - arn:aws:ec2:*::snapshot/*
  Condition:
    StringEquals:
       ec2:ResourceTag/Stack: Test