Hello, what are the permission required in aws to getAmi? programmic access is enabled for the IAM user...

do you mean the iam permissions set on the user?

interface GetAmiFilter {
        /**
         * The name of the AMI that was provided during image creation.
         */
        name: string;
        values: string[];

https://github.com/pulumi/pulumi-aws/blob/master/sdk/go/aws/getAmi.go Amazon EC2 permission attributes :- Your organization might have multiple AWS accounts. Amazon EC2 enables you to specify additional AWS accounts that can use your Amazon Machine Images (AMIs) and Amazon EBS snapshots. These permissions work at the AWS account level only; you can't restrict permissions for specific users within the specified AWS account. All users in the AWS account that you've specified can use the AMI or snapshot. Each AMI has a 

LaunchPermission

 attribute that controls which AWS accounts can access the AMI. For more information, see Make an AMI public. Each Amazon EBS snapshot has a 

createVolumePermission

 attribute that controls which AWS accounts can use the snapshot. For more information, see Share an Amazon EBS snapshot.