What problem does it solve? Applications on EC2 often rely on hardcoded AWS credentials, which is insecure and hard to rotate. This Skill guides you through granting an EC2 instance secure, temporary access to AWS services using IAM roles and instance profiles instead of embedded access keys. ## Core Features & Use Cases - Least-Privilege Permission Planning: Analyzes the services you need (S3, DynamoDB, SQS, CloudWatch, and more) and recommends scoped IAM policies instead of broad FullAccess policies. - Full Lifecycle Automation: Creates or reuses IAM roles, builds trust policies, creates instance profiles, attaches them to instances, and handles replacement of existing profiles. - Verification and Reporting: Validates the configuration with IMDSv2-based credential tests, provides SDK code examples (Python, Node.js, Java), and generates a summary report with security recommendations and cleanup steps. - Use Case: You have a web server on EC2 that needs to read from S3 and write CloudWatch logs. Provide the instance ID, region, and services, and the Skill walks you through creating a scoped role, attaching it, and verifying credentials work. ## Quick Start Ask the assistant to set up an instance profile for EC2 instance i-0123456789abcdef0 in us-east-1 with access to s3 and dynamodb.
