Create an Identity and Access Management (IAM) Role for HFE

AWS Identity and Access Management (IAM) is a web service that helps to securely control user access to AWS resources through authentication and authorization. For more information on IAM, refer to https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-iam.html.

Where to start?

Create a policy for the HFE node using the JSON method (refer to https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_create.html). Refer to the policy details below.
Attach this policy to a new IAM role. Enter this IAM role in the template (IAMRoleHFE :IAM rol) for HFE instances.

 {
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
               "ec2:DescribeInstances",
               "ec2:DescribeAddresses",
               "ec2:DescribeNetworkInterfaces",
               "ec2:DescribeInstanceAttribute",
               "ec2:DescribeRegions",
               "ec2:ModifyInstanceAttribute",
               "ec2:DescribeInstanceStatus",
               "ec2:DescribeSubnets",
               "s3:Get*",
               "s3:List*",
               "events:PutRule",
               "cloudwatch:PutMetricData"
            ],
            "Resource": "*"
        }
    ]
}

To create a Policy and associate it to a Role for the SBC, complete the following steps:

Navigate to IAM Dashboard: https://console.aws.amazon.com/iam/home
Select Policies from the left panel.
The Policies page displays:
Click Create Policy.
The Create Policies page displays:
Click on the JSON tab.
The JSON editor panel appears:

Update the policy to include the following content:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:Get*",
                "s3:List*"
            ],
            "Resource": "*"
        }
    ]
}

Click Review Policy.
Enter a name for the policy and a description, then click Create Policy.
The Create Policy window appears:
The user will get an indication that the policy was created and the create policy window appears again.
Click Roles.
The Roles window appears:
Click Create Role.
The Create role window appears:
Select EC2 as the service that will use this role, then click Next: Permissions
The Attach permissions policies window appears:
In the search window next to Filter policies, type the name of the policy you just created, then select it from the list.
Click Next: tags
The Add tags window appears:
If desired, enter a tag. Click Next: Review
The Create Role Review page is displayed:
Enter a Role name and then click Create Role.
The user returns to the Create Role window.
You can verify that your role was created by typing the name of the created role in the search area.