github.com/openshift/installer@v1.4.17/docs/user/aws/iam_after.md (about)

     1  # IAM User: Revisited
     2  
     3  Once OpenShift is installed, the installer account no longer requires the AdministratorAccess policy. This user account
     4  may be deleted or have its access keys revoked (or disabled until needed later/again). You may also opt to remove the
     5  AdministratorAccess policy in favor of ReadOnlyAccess. You perform all these steps by revisiting IAM and updating the
     6  user created earlier.
     7  
     8  ## Example: Remove AdministratorAccess, Attach ReadOnlyAccess
     9  
    10  ![IAM Remove AdministratorAccess](images/iam_after_remove_admin.png)
    11  
    12  ![IAM Remove AdministratorAccess](images/iam_after_add_readonly.png)