Using the Amazon unified command line interface:

• Create an IAM role for managing incidents with AWS:
  • Create a trust relationship policy document that allows <iam_user> to
    manage AWS incidents, and save it locally as /tmp/TrustPolicy.json:
  • {
    Version”: “2012-10-17”,
    “Statement”: [
    {
    “Effect”: “Allow”,
    “Principal”: {
    “AWS”: “&lt