# Ansible and AWS user for boto

**URL:** <https://forum.ansible.com/t/ansible-and-aws-user-for-boto/18428>\
**Category:** Ansible Project\
**Tags:** aws\
**Created:** [June 8, 2015, 12:37pm UTC](https://forum.ansible.com/t/ansible-and-aws-user-for-boto/18428 "2015-06-08T12:37:11Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![jaysmythe123](https://avatars.discourse-cdn.com/v4/letter/j/7993a0/32.png) [@jaysmythe123](https://forum.ansible.com/u/jaysmythe123)\
**Post date:** [June 8, 2015, 12:37pm UTC](https://forum.ansible.com/t/ansible-and-aws-user-for-boto/18428/1 "2015-06-08T12:37:11Z")

</div>

Hi,

Does the AWS user in the .boto file have to be in the Administrators group? I’m only using ansible to manage EC2 instances, but if I try using a user with just ec2:\* access (or the configured **AmazonEC2FullAccess** policy)I get auth error:

ERROR: Inventory script (/etc/ansible/hosts) had an execution error: Error connecting to AWS backend.  
You are not authorized to perform this operation.

I don’t particularly want the .boto user to be a full admin user.