Skip to content

Creating AWS Access Keys

In order to self-host, you will first need to generate AWS Access keys for your account.

  • AWS account
  • Administrator access to AWS Console

  1. Go to AWS Console.
  2. Sign in with your AWS credentials.

  1. Go to IAM (search for “IAM” in the top bar).

  2. Click Policies in the left menu.

  3. Click Create policy.

  4. Select the JSON tab.

  5. Paste the following policy:

    {
    "Version": "2012-10-17",
    "Statement": [
    {
    "Sid": "VisualEditor0",
    "Effect": "Allow",
    "Action": [
    "ec2:DetachVolume",
    "ec2:AttachVolume",
    "ec2:DeleteVolume",
    "ec2:DescribeInstances",
    "ec2:DeleteTags",
    "ec2:StartInstances",
    "ec2:CreateTags",
    "ec2:StopInstances",
    "ec2:CreateVolume"
    ],
    "Resource": "*"
    }
    ]
    }
  6. Click Next twice.

  7. Name your policy (e.g., “EC2VolumeManager”).

  8. Click Create policy.


  1. Go to Users in the left IAM menu.
  2. Click Add users.
  3. Enter a username (e.g., “ec2-volume-user”).
  4. Check Access key - Programmatic access.
  5. Click Next: Permissions.

  1. Select Attach existing policies directly.
  2. Search for the policy you just created.
  3. Check the box next to it.
  4. Click Next twice.
  5. Click Create user.

  • IMPORTANT: You’ll only see the Secret Access Key ONCE.
  • Download the CSV file or copy both keys somewhere secure.
  • Access Key ID looks like: AKIAIOSFXXXXXXXXAMPLE
  • Secret Access Key looks like: wJaasdfslfslfsFEMI/K7MDENG/XXX

That’s it! You now have access keys with permissions to manage EC2 volumes and instances.