Advanced Clusters

Back Next

Add the AssumeRole permission to the Secure Agent role

The Secure Agent needs to assume the cluster operator role to gain elevated permissions to manage an

advanced cluster

. For the Secure Agent to assume the cluster operator role, the Secure Agent role needs to have the AssumeRole permission.

To configure the AssumeRole permission, complete the following tasks on AWS:

Create the following IAM policy called

assume_role_agent_policy

{
    "Version": "2012-10-17",
    "Statement": {
        "Effect": "Allow",
        "Action": "sts:AssumeRole",
        "Resource": "arn:aws:iam::{{account-id}}:role/cluster_operator_role"
        }
    }

The value in the Resource element is the ARN of the cluster operator role.

Attach the IAM policy

assume_role_agent_policy

to the IAM role

agent_role

Step 7. Create IAM roles

Download Guide

Watch

Comments

Communities

Knowledge Base

Success Portal

0 COMMENTS

We’d like to hear from you! Log in to comment.

Rename Saved Search

Table of Contents

Advanced Clusters

Advanced Clusters

Add the AssumeRole permission to the Secure Agent role

Add the AssumeRole permission to the Secure Agent role