Instance profile configuration for AWS Secrets Manager
Instance profile configuration for AWS Secrets Manager
If you access AWS Secrets Manager using instance profile authentication, you need to
create an IAM policy that can read secrets, create a role that has this policy, and then
attach an instance profile to the AWS resource that hosts the Secure Agent.
Log in to the AWS Management Console.
Navigate to the IAM console.
Under
Access management
, select
Policies
.
Click
Create policy
.
Create an IAM policy with the
All list actions
and
All read actions
access levels as shown in the
following image:
Under
Access management
, select
Roles
.
Click
Create role
.
On the
Select trusted entity
page, select
AWS
service
as the trusted entity type and
EC2
as the use case, and then click
Next
.
On the
Add permissions
page, select the policy you
created, and then click
Next
.
Enter a role name, verify the permissions policy, and create the role, as shown
in the following image:
Navigate to the EC2 dashboard and select the EC2 instance that hosts the Secure
Agent.
Click
Advanced
.
Under
IAM instance profile
, select the IAM role you
created, and launch the EC2 instance.
ASK INFAPreview
