User guide

To create the IAM role to give S3 read-only access to your EC2 instance
1. Log in to the AWS Management Console and go to IAM.
2. Select Roles in the left sidebar and click Create New Role.
3. Provide a memorable name for your role (you'll need to enter its name when you create the EC2
instance, later), and click Continue.
4.
The IAM console provides ready-made policy templates for specific AWS services. When you create the
IAM role, specify the Amazon S3 Read Only Access policy template. The following screen shot from
the IAM role creation wizard shows this policy template.
Version v1.0.0
31
AWS SDK for Java Developer Guide
Using IAM Roles for EC2 Instances