Depending on your resources in use, it is useful to assign some additional permissions for our testing.

Under your IAM - Users section, search for the onsecurity-audit user you created and click it.

On the user page, click Add Inline Policy.

Along the top of this page, click JSON and then paste the following JSON content:

{    
"Version": "2012-10-17",    
"Statement": [        
{            
"Action": [                
"ds:ListAuthorizedApplications",                "ec2:GetEbsEncryptionByDefault",                
"ecr:Describe*",                
"support:Describe*",                
"tag:GetTagKeys",                
"lambda:GetFunction",                
"glue:GetConnections",                
"glue:SearchTables",                
"s3:GetAccountPublicAccessBlock"            
],            
"Resource": "*",            
"Effect": "Allow",            
"Sid": "OnSecAdditionalPentestPerms"        
}    
]}

Click Review Policy, assign the policy a name such as OnSecurityPentestAdditionalPermissions and click Create Policy.

OnSecurity AWS Penetration Test Setup Guide

Browse to IAM - Users Section