I need to set up EC2, RDS, and S3 on AWS for a project. The client wants the account to be in their name and they dont want to share their credentials (understandable). My goal is to give my client instructions on how to grant me access to create the services (EC2, RDS, S3) and then work with them.
I'm reading the documentation for IAM but I'm getting a little lost. While creating a new user, I see the permissions list with 100+ preconfigured roles in there but I dont know what roles I need. I see
Network Administrator, and other ones like
AmazonEC2FullAccess and those seem promising. I'm hesitant because I dont want to go back and forth with the client, guessing which roles I need. I want it to be one-and-done.
What are the instructions to grant a user access to create new services and work with them?