> mapping some of the apis to iam as its only 85% 1:1

Yeah. Try to create an Elastic beanstalk app with only EB permissions.