No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

No magic bullet, I think I have to create the role, then attach a policy to the role, then create the instance profile from the role.

this help to that end? <https://github.com/pulumi/examples/blob/76cdb38ad9c1e6b632910eaadb38263f80f9015b/aws-ts-eks-migrate-nodegroups/iam.ts#L44>

Crosswalk also looks to have helpers here, if you’re using a language supported by that <https://www.pulumi.com/docs/guides/crosswalk/aws/iam/#iam-roles>