All you need to proceed is the CLI tool installed with a profile that can call the AWS IAM API. If you don't have this, you can follow along with the recipe steps using the AWS web console instead, as the process is the same.