[Documentation] What permissions does the charm need in AWS?

[Adam Dyess]

The aws-integrator charms makes attempts to create/modify elements within a users AWS Cloud, but many errors can occur when the token provided to the charm doesn't have the permissions necessary to enact the change in the cloud.

Can the charm docs offer guidance to which permissions are necessary so the charm can perform its duty?

[Adam Dyess (addyess)]

token permissions require AmazonEC2FullAccess plus the following.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "iam:AttachRolePolicy",
                "iam:CreateRole",
                "iam:PassRole",
                "iam:CreatePolicy",
                "iam:PutRolePolicy",
                "iam:CreateInstanceProfile",
                "iam:AddRoleToInstanceProfile"
            ],
            "Resource": "*"
        }
    ]