Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 31 Next »

This article instructs on adding an AWS account to Cloudaware using the AWS IAM role. Ensure you have the necessary permissions in AWS.

  1. Log in to your Cloudaware account → Admin.

new admin.png

  1. Find Amazon Organizations & Accounts. Click +N Configured → +Add Amazon Account.

admin - add aws account.pngadmin - add amazon account.png

  1. Type AWS account name in the form. Select 'AWS IAM role' as authentication type.

a. Select AWS Partition.

Screenshot 2024-09-12 at 3.04.10 PM.png

b. Generate External ID clicking the button Generate Random:

Screenshot 2024-09-12 at 3.04.38 PM.png

Copy and save External ID required for Cloudaware IAM Role creation in AWS console.

c. Select the option for CloudFormation stack creation:

Quick launch

Manual creation

This option allows launching AWS CloudFormation stack with a pre-generated Cloudaware template. Click Launch Stack to be redirected to AWS Console:

aws start guide - using iam role - quick launch - launch. stack.png

This option allows the manual creation of AWS CloudFormation stack. Click Template to download* the CloudFormation template:

aws start guide - using iam role - manual creation - download template.png

*Download populated with account data - the template will contain your Cloudaware account-specific data with AWS Account data auto-populated
Download with placeholders - the template will contain placeholders that need to be populated with AWS accounts data

4. Log in to AWS console:

Quick launch

Manual creation

Note that Amazon S3 URL is pre-selected as Template source. The URL for Cloudaware template is auto-populated. Click Next.

aws start guide - using iam role - aws console - s3 url populated.png

Go to All Services → the section 'Management & Governance' → CloudFormation. 

Click Create Stack → With new resources (standard).

aws start guide - using iam role - aws console - create stack with new resources.png

Select Upload a template file → click Choose file* to upload the template. Click Next.

aws start guide - using iam role - aws console - upload a template file.png

* - upload the Cloudaware template.

5. Specify stack details:

a. Provide Stack name (or leave it as is, e.g. cloudaware-iam-role-stack)

b. Fill in Parameters:

aws start guide - using iam role - parameters in aws.png

WHERE

CloudAware Role ARN: leave it as is

CloudAware Role Name: Replace auto-generate with a meaningful name, e.g. Cloudaware IAM Role

External ID: paste External ID generated in the Cloudaware console

c. In the section 'Policies', select preferable features. Click Next.

6. Configure stack by setting up tags and permissions, stack failure options, and advanced options if necessary. Click Next.

7. Review the stack details. Check the box I acknowledge that AWS CloudFormation might create IAM resources with custom names. Click Submit.

aws start guide - using iam role - capabilities.png

Please allow some time for the stack to be created.

8. Open the tab 'Outputs' for the created stack. Copy the IAM Role ARN value.

9. Go back to Cloudaware. Paste Role ARN in the form. Click Check:

aws start guide - using iam role - paste role arn.png

Once validation is passed, click Save.

Your AWS account will be added automatically. Please allow some time for Cloudaware to gather data from your AWS account based on the granted permissions.

  • No labels