AWS Account - System Data Connector Guide

2. Create an IAM user and assign permissions

1. From the AWS Management Console log in to this AWS Account with a user that has administrative privileges.

2. Navigate to the Identity and Access Management (IAM) service by searching for IAM in the search bar.
3. Select IAM Users, and then Create user.
4. For Step 1: Specify user details, provide a User name (e.g. "gathid-access") and click Next. (This user does not need access to the AWS Management Console.)
5. For Step 2: Set permissions, leave the Permissions options as the default (Add user to group) and click Next. (
6. For Step 3: Review and create, click on Create user. 
7. Return to IAM Users and click on the user that has just been created.
8. On the Permissions tab, in the Permissions policies section, click on the Add permissions drop down and select Create inline policy. (If you prefer, create a customer managed policy and attach it to this user.)
9. For Step 1: Specify permissions, on the right-hand side of Policy editor, select the JSON tab. Delete the existing JSON and paste the following:
   

   {
   "Version": "2012-10-17",
   "Statement": [
   {
   "Effect": "Allow",
   "Action": [
   "iam:GetAccountAuthorizationDetails",
   "iam:ListRoles",
   "iam:ListPolicies",
   "iam:GetPolicyVersion"
   ],
   "Resource": "*"
   }]}

10. Click Next.
11. For Step 2: Review and create, under Policy details enter a Policy name (e.g. gathid-access-policy).
    Click on Create policy. This policy gets added to the user as a "Customer inline" policy.

3. Obtain credentials from your AWS Account instance for the Gathid configuration

1. After a user has been created and the permissions have been assigned, return to the IAM Users section and click on the user that has just been created.

2. In the Summary section on the right-hand-side, click Create access key.

3. For Step 1: Access key best practices & alternatives, select Other and click Next.

4. For Step 2: Set description tag, this is optional so it can be left empty. Click Create access key.
   A confirmation message appears at the top of the screen. Do not leave this screen without downloading the credentials as they cannot be recovered.
5. Either copy the Access key and the Secret Access key or click Download.csv file.
   Keep these credentials as they will be required in the step to configure the Gathid loader.
6. Click Done.

4. Configure the Prep Script tab in the AWS Account system loader

1. As an Administrator, log into Gathid and navigate to Admin → Systems.
2. Select the AWS Account loader and in 1. System Information toggle the System Enabled option to On.
   Ensure the correct start time for the loader is set in the Time. This should be close to your instance's stack start time.
3. Then go to 2. Prep-Scripts (Optional) and edit the AWS Account Prep Script.
   Under Customer Configuration, enter the Access Key and Secret obtained in the previous step.
4. Click on Save Parameters to save the prep-script changes.
   Click Save again to save the system loader configuration.
   

    

Next Steps: 

Add External Relationships

System Properties