I added a user to a group in amazon AWS. The user has the privilege of adding EC2 instances but does not appear to have the privilege of creating a keypair - the request is getting denied. Any idea on what privilege needs to be added to enable this feature for the new user?
The specific IAM permission required is
ec2:ImportKeyPair
.I was missing the administrator policy for the user. Once added in AWS, the new user could then import keypair or generate a new one. Hope this helps.