IAM policy recommendations

[matb33]

Any recommendations for a well-crafted IAM user policy?

Out of laziness I just went for Power User, but ideally the policy would be narrowly specified for subsets of EC2 and S3 functionality -- but exactly which permissions is always tricky business :)

Do you happen to have a policy already?

[toffer]

I'm afraid I don't have one, but that's a good suggestion.