Creating an AWS policy and an AWS API Access Key

Register AWS Policy, create User and Create API Credentials

Pre-requisites

You need existing or new Amazon Web Services account. See How do I create and activate a new Amazon Web Services account? page in Amazon Documentation.

Overview

To deploy a cluster in your AWS account with Kublr, you’ll need to create an AWS policy and an AWS API Access Key. All cluster resources (e.g. nodes) are created in your AWS account using the AWS API and will be managed by Kublr.

Use your AWS root account credential to sign in to the AWS Management Console. If you previously signed into the console with your IAM user credentials, your browser may open the IAM user sign-in page. To avoid that, choose sign in using your root account credentials to access the AWS account sign-in page.

Create an AWS Security Policy for Kublr’s API Access

IAM console: choose Policies in the navigation column on the left.
At the top of the page, choose Create Policy.
On the Create Policy page select JSON tab.
In the Policy Document section, enter this policy profile
Click Review Policy.
Enter the Policy Name.
Click Create Policy to generate the policy.

Policy should be created. Create Your Own Policy

Create AWS User with Programmatic Access

Choose Users in the navigation column on the left.
At the top of the page, select Add User
Enter your username and select Programmatic Access.
Click Next Permissions.
Select Attach Existing Policy Directly
Select the policy you generated.
Click Next Review.
Click Create User.
Copy Access Key ID and click Show to copy Secret access key. Or Download it. Note: This is the only time you can copy Secret access key for this Access Key ID.
Click Close button. User is presented in the list.

Create a new AWS Access Key for existing user

On the top right of the console, click on your account name or number. Then choose My Security Credentials.
IAM console: choose Users in the navigation column on the left.
Select User name in the list and clcik it.
Open Security Credentials tab.
Choose Create New Access Key.