Status: IN
Launching an EC2 instance requires both `ec2:RunInstances` (with wildcard resource) and `iam:PassRole` (scoped to the role ARN) IAM permissions.
Source: entries/2026/03/11/AWSEC2-latest-UserGuide-troubleshooting-launchhtml.md
JSON