You can create a custom role by grouping specific permissions. The role can then be assigned to users.
To create a role and assign it to a user:
In the IAM dashboard page, hover over
in the upper-right corner and select Manage Users.Click Add Role in the Roles pane.
(Or) Select a canned role and click Duplicate. You can edit duplicated canned roles.
Specify the name of the role in Role Name field.
From the Unassigned Permissions list, select the permissions that you want to assign to the role.
Click Save Changes.
The details show which permissions are assigned to the selected role.
Click Edit Assignments to view the User Assignments pane.
In the User Assignments pane, select the user account you want to assign the role to.
Click Save Changes.