Configure Promtail on EC2

I am referring EC2 | Grafana Labs to configure promtail on EC2 machine. What permissions do I need to enable for the access_key and secret_key in ec2_sd_configs?

Duplicate of Promtail EC2 permissions - #5 by kavikanagaraj