Go to settings > Admin Console
Under instance profiles tab you can add an instance profile which is a container for IAM role. Using this you can let EC2 instance know which S3 buckets it can access.
Under users tab you can manage users who have access to create cluster.