cri-o/vendor/k8s.io/kubernetes/cluster/aws/templates/iam/kubernetes-minion-role.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": { "Service": "ec2.amazonaws.com"},
      "Action": "sts:AssumeRole"
    }
  ]
}