Configuring failover BIG-IP on EC2 - Access policy and keys

Has anyone successfully configured a failover BIG-IP on EC2? I'm keen to know what Access Policy was attached to the IAM user where the access and secret keys.

The how-tos from F5 do not mention what level of access is required for the DSC and API calls to work.

http://ift.tt/1DaDBS9

Does anyone know what is the least privilege access is required for the failover to work?