1. To create an IAM role, select the EC2 instance.
    A screenshot of EC2 instance on the create role page.
  2. Assign the AmazonEC2ReadOnlyAccess privilege to the role.
    A screenshot of role privileges with AmazonEC2ReadOnlyAccess highlighted
  3. Enter the role name.
    A screenshot of review window with an example in Role name field.