Instance profile w/ role to access all S3 buckets

aws.sh

#!/bin/bash

echo '{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": { "Service": "ec2.amazonaws.com"},
      "Action": "sts:AssumeRole"
    }
  ]
}' > /tmp/ec2-role-trust-policy.json

aws iam create-role --role-name nipype-pol --assume-role-policy-document /tmp/ec2-role-trust-policy.json

echo '{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": ["s3:*"],
      "Resource": ["*"]
    }
  ]
}' > /tmp/ec2-role-access-policy.json

aws iam put-role-policy --role-name nipype-pol --policy-name nipype-pol --policy-document /tmp/ec2-role-access-policy.json
aws iam create-instance-profile --instance-profile-name nipype-pol-profile
aws iam add-role-to-instance-profile --instance-profile-name nipype-pol-profile --role-name nipype-pol