# What IAM permissions are needed for EC2 Inventory?

**URL:** <https://forum.ansible.com/t/what-iam-permissions-are-needed-for-ec2-inventory/35262>\
**Category:** AWX Project\
**Tags:** aws\
**Created:** [May 31, 2021, 4:54pm UTC](https://forum.ansible.com/t/what-iam-permissions-are-needed-for-ec2-inventory/35262 "2021-05-31T16:54:21Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Brandon\_Ellis](https://avatars.discourse-cdn.com/v4/letter/b/dec6dc/32.png) [@Brandon\_Ellis](https://forum.ansible.com/u/Brandon_Ellis)\
**Post date:** [May 31, 2021, 4:54pm UTC](https://forum.ansible.com/t/what-iam-permissions-are-needed-for-ec2-inventory/35262/1 "2021-05-31T16:54:21Z")

</div>

I want to create an AWS user specifically for using the EC2 inventory plugin. What permissions should I give said user?

---

<div class="post-metadata">

**Author:** ![Brandon\_Ellis](https://avatars.discourse-cdn.com/v4/letter/b/dec6dc/32.png) [@Brandon\_Ellis](https://forum.ansible.com/u/Brandon_Ellis)\
**Post date:** [May 31, 2021, 5:28pm UTC](https://forum.ansible.com/t/what-iam-permissions-are-needed-for-ec2-inventory/35262/2 "2021-05-31T17:28:10Z")

</div>

Got it.  
For reference, these are the permissions:

{  
“Version”: “2012-10-17”,  
“Statement”: [  
{  
“Action”: [  
“ec2:DescribeRegions”,  
“ec2:DescribeInstances”  
],  
“Effect”: “Allow”,  
“Resource”: “\*”  
}  
]  
}