It is more than possible to create an access key and secret key for your own AWS user that would give Ansible full access to your AWS account.
Because of this, we are going to look at creating a user for Ansible which only has permission to access the parts of AWS we know that Ansible will need to interact with for the tasks we are covering in this chapter. We will be giving Ansible full access to the following services:
- Amazon VPC
- Amazon EC2
- Amazon RDS
- Amazon EFS
To do this, log in to the AWS console, which can be found at https://console.aws.amazon.com/. Once logged in, click on Services, which can be found in the menu at the very top of the screen. In the menu which opens, enter IAM into the search box ...
