When you are using Clouds to discover your Amazon AWS instances, you will need two credential items - key and secret key.
Your key should already be known to you and your secret key as well. Of note is that you cannot retrieve your secret key using the AWS Console provided by Amazon. If you have misplaced it, you will need to generate a new one.
Retrieving or Creating
To retrieve your key, log in to the AWS Console and select your username, then My Security Credentials.
On the next page you will be able to select Access Keys and see your key or create a new key.
Required AWS user permissions
The only required permission / policy name (in our testing) is AmazonEC2ReadOnlyAccess.
Once you have those items, in Open-AudIT Enterprise you can go to menu -> Discover -> Clouds -> Create Clouds, select the "Amazon AWS" type and paste them in. Done :)
Can you please describe which IAM roles are required at the minimum?