Change AWS authentication from role based to credential based
The following steps have been provided as an example to help you to change authentication from a role based cloud account to a credential based cloud account:
Steps
- In the Edit Cloud Account page, select Credentials based.
- Log in to the AWS Management Console.
-
Open the
IAM console and create a user using the following steps:
- In the navigation pane of the IAM console, select Users, and then click Add user.
- Enter the username and select Programmatic access as the access type.
- Click Next: Permissions.
- Click Next: Tags.
- Click Next: Review.
- Ignore the warning, 'This user has no permissions' and click Create user.
- Copy the access key ID and secret access key for later use.
- Click the newly created username link and copy the user ARN.
-
Complete the following to create a policy:
-
Copy content from
AWS minimum permission policy.
For details about each AWS permission and how it is used by Cloud Snapshot Manager, see AWS permission usage.
- In the navigation pane of the IAM console, select Policies, and then click Create policy.
- Select the JSON tab, and paste the copied content from the portal.
- Click Review policy.
- Enter a policy name and click Create policy.
-
Copy content from
AWS minimum permission policy.
-
Associate the policy with the user using the following steps:
- Search for the user in the Users page and click on it.
- Under the Permissions tab, click Add permissions.
- Select Attach existing policies directly and search for the policy that was created.
- Select the policy and click Next: Review.
- Click Add permissions.
- Paste the access key ID and secret access key in the corresponding fields in Cloud Snapshot Manager.
- Click Save.