Create a Role for single account
Login to console of your AWS account where Kumolus will be running, access the IAM service as showed in picture below:
Once you are in IAM service administration click on Roles at the left menu
Then click on blue button labeled Create Role
On the next screen, select AWS Service and under "Choose the service that will use this role" select EC2 and click Next:Permissions.
It is important to have all required permissions in your AWS account to enable managing your account from Kumolus. On the next page, you will see a list of default and user-defined policies.
Filter and Attach the Kumolus-NormalAccount policy that you had created in previous steps (Create Policies) to this Role. Click Next.
On the next screen, provide a name (e.g. Kumolus-Access) and description to the Role.
Review the details and click on Create Role to finish.
Once created, you can filter the Role by name from the Role list on the IAM Console.
Click on the role to view details or edit it.