...
VE license server versions earlier than 1.1.23 only - IAM role requirement
In the AWS cloud, an IAM role allowing the ListUsers action (IAMReadOnlyAccess in the example below) must be attached to the VE license server instance. This can be done during the launch of the instance as shown in the sample below.
Alternatively, the role can be set/changed by selecting the instance, right-clicking on it, and selecting Security > Modify IAM Role (in the older AWS console, use the Action menu). If such a role has not yet been defined, please refer to Creating and Attaching an AWS IAM Role (versions < 1.1.23 only) and to the documentation provided by AWS for additional information.
...