To work in the console, users must have permissions to perform the actions that the console performs, such as listing and creating AWS resources. For more information, see Access management for AWS resources and Example IAM identity-based policies .
https://docs.aws.amazon.com/IAM/latest/UserGuide/getting-started_how-users-sign-in.html

