iam:GetInstanceProfile is now required

website/source/docs/builders/amazon.html.md

@@ -202,7 +202,10 @@ work, but specifics will depend on your use-case.
 {
     "Sid": "PackerIAMPassRole",
     "Effect": "Allow",
-    "Action": "iam:PassRole",
+    "Action": [
+        "iam:PassRole",
+        "iam:GetInstanceProfile"
+    ],
     "Resource": [
         "*"
     ]
@@ -314,4 +317,4 @@ generally during image copy/encryption. Possible reasons for the error include:
     - Your KMS key is invalid, possibly because of a typo
     - Your KMS key is valid but does not have the necessary permissions (see
       above for the necessary key permissions)
-    - Your KMS key is valid, but not in the region you've told us to use it in.
+    - Your KMS key is valid, but not in the region you've told us to use it in.