IAM users must have an “AWS MarketplaceFullAccess” policy attached so that you can subscribe to the Marketplace Vector edition of your choice and be able to create EC2 instances. For more information, see http://docs.aws.amazon.com/marketplace/latest/controlling-access/ControllingAccessToAWSMarketplaceSubscriptions.html.