Create an AWS user with minimal permissions for the dynamic attributes connector

This task creates a service account with minimum permissions to send dynamic attributes to Security Cloud Control.

For a list of the dynamic attributes that can be sent, refer to Amazon Web Services connector user permissions and imported data.

Before you begin

You must already have set up your Amazon Web Services (AWS) account. For more information about doing that, see this article in the AWS documentation.

Follow these steps to create an AWS user with minimal permissions for the dynamic attributes connector:

Procedure

Step 1

Log in to the AWS console as a user with the admin role.

Step 2

From the Dashboard, click Security, Identity & Compliance > IAM.

Step 3

Click Access Management > Users.

Step 4

Click Add Users.

  1. In the User Name field, enter a name to identify the user.

  2. Click Access Key - Programmatic Access.

  3. At the Set permissions page, click Next without granting the user access to anything. You can grant user access later.

  4. Add tags to the user if desired.

  5. Click Create User.

  6. Click Download .csv to download the user's key to your computer.

    Note

    This is the only opportunity you have to retrieve the user's key.

  7. Click Close.

Step 5

At the Identity and Access Management (IAM) page in the left column, click Access Management > Policies.

Step 6

Click Create Policy.

  1. On the Create Policy page, click JSON.

    Create a JSON policy

  2. Enter the following policy in the field:

    {
	"Version": "2012-10-17",
	"Statement": [
		{
			"Effect": "Allow",
			"Action": [
				"ec2:DescribeTags",
				"ec2:DescribeInstances",
				"ec2:DescribeVpcs"
			],
			"Resource": "*"
		}
	]
}

  3. Click Next.

Step 7

Click Review.

On the Review Policy page, enter the requested information and click Create Policy.

Step 8

Attach your policy

  1. On the Policies page, enter all or part of the policy name in the search field and press Enter.

  2. Click the policy you just created.

  3. Click Actions > Attach.

  4. If necessary, enter all or part of the user name in the search field and press Enter.

  5. Click Attach Policy.

What to do next

Create an AWS connector.