Because we launch instances and volumes, create AMIs, SnapShots, KeyPairs and security groups, read only access would not suffice. We have considered creating a

Because we launch instances and volumes, create AMIs, SnapShots, KeyPairs and security groups, read only access would not suffice. We have considered creating an IAM template, but it would need nearly the same permissions as full access. But it would probably still be a good idea for users who aren't comfortable, at least that way they can see exactly what is required. I'll revisit this, thank you.