Create an AWS Identity and Access Management (IAM) policy that allows step functions to start and stop instances and retrieve information on the instance:
- Open the IAM console.
- In the navigation pane, select Policies. Then, select Create Policy.
- Select the JSON tab
- Next select: Tags.
- To add a tag, select Add Tag, and then enter the appropriate values for the Key and Value fields.
- Next select: Review.
- Enter a name for your policy. For example, enter step-functions-start-stop-rds-policy. To review the permissions granted by your policy, see the Summary section.
- Select Create Policy.
