Ansible and AWS user for boto

[jaysmy...@gmail.com]

Hi,

Does the AWS user in the .boto file have to be in the Administrators group?  I'm only using ansible to manage EC2 instances, but if I try using a user with just ec2:* access (or the configured AmazonEC2FullAccess policy)I get auth error:

ERROR: Inventory script (/etc/ansible/hosts) had an execution error: Error connecting to AWS backend.
You are not authorized to perform this operation.

I don't particularly want the .boto user to be a full admin user.