Auto Scaling Control Access

• credentials are needed to access EC2 Auto Scaling 
• credentials must have permissions to perform actions.
• Can use Identity and Access Management (IAM)
• By default, new IAM user has no permissions to do anything.
• To grant permissions, attach IAM policy to IAM users or groups that require permissions
• Can also create own policies to specify allowed or denied actions and resources, also conditions for same

EC2 Auto Scaling service-linked roles types

• default service-linked role for account, named AWSServiceRoleForAutoScaling. This role is automatically assigned to Auto Scaling groups unless you specify a different service-linked role.
• A service-linked role with a custom suffix that you specify when you create role, for example, AWSServiceRoleForAutoScaling_mysuffix.