anchor.diff:  .Required permissions for creating network resources during installation
   [%collapsible]
   ====
  +* `ec2:AllocateAddress`
  +* `ec2:AssociateAddress`
   * `ec2:AssociateDhcpOptions`
   * `ec2:AssociateRouteTable`
   * `ec2:AttachInternetGateway`
  
positive.code: .Required EC2 permissions for installation
  [%collapsible]
  ====
  * `ec2:AllocateAddress`
  * `ec2:AssociateAddress`
  * `ec2:AuthorizeSecurityGroupEgress`
  * `ec2:AuthorizeSecurityGroupIngress`
  * `ec2:CopyImage`
  
negative.code: * `ec2:GetEbsDefaultKmsKeyId`
  * `ec2:ModifyInstanceAttribute`
  * `ec2:ModifyNetworkInterfaceAttribute`
  * `ec2:RevokeSecurityGroupEgress`
  * `ec2:RevokeSecurityGroupIngress`
  * `ec2:RunInstances`
  