A role is a set of permissions that can be granted to an instance, allowing API calls on an instance to inherit those permissions with the explicit need for credentials in hand. In this tutorial, we're creating a single broad role for convenience. Each @netflixoss project that can leverage a role will specify its own minimum policy.
- View Roles page. Which can also be accessed from the Services | IAM | Roles.
- Click "Create New Role", name it “jumphost”, click “Continue”.
- Click "Select" next to the “Amazon EC2” service role type.
- Click "Select" next to the “Administrator Access” policy template.
- Click "Continue".
- Click "Create Role".