The UI for permission check should be likely implemented as the first step in the status screen. There are already dedicated calls by the UI made into backend (e.g. create SSH pubkey) so it is just reusing this code and doing a new step. Should basically read something like:

Permission Check
Validate AWS API permissions