How would the Roles be setup in IAM?

[Mike Hoskins]

Do you have examples of the IAM Permissions as mentioned in the README?

Thanks!

[Travis McPeak]

Hmm, not sure I understand the question. Are you asking how to create a policy with those permissions?

[Mortinke]

Is this what you want?

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "iam:GenerateServiceLastAccessedDetails",
                "iam:GetServiceLastAccessedDetails",
                "iam:listrolepolicies",
                "iam:listroles"
            ],
            "Resource": "*"
        }
    ]
}

[Mike Hoskins]

Yeah, that would be nice to have in the README... ...but I tried that and it didn't work.

Thanks for the response.

[Mortinke]

Please look in #12. Additional rights are necessary with the current commit. I use this policy without problems:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "iam:GenerateServiceLastAccessedDetails",
                "iam:GetServiceLastAccessedDetails",
                "iam:listrolepolicies",
                "iam:listroles",
                "iam:ListUsers",
                "iam:ListPolicies",
                "iam:ListGroups"
            ],
            "Resource": "*"
        }
    ]
}

If this policy doesn't work, please post the error message.

[Travis McPeak]

This should be good with latest update to README, please reopen if needed.