While trying to get packer to:
1. Assume a role
2. use `auto` price for spot instances
2. Assign an instance profile to the provisioned instance, I hit this error:
```
The provided credentials do not have permission to create the service-linked role for EC2 Spot Instances.
```
Adding the `iam:CreateServiceLinkedRole` entitlement to the role that packer assumes was all I needed to do.