Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Widget Connector
width800
urlhttps://vimeo.com/303556716
height600

About IAM

AWS Identity and Access Management (IAM) enables you to manage access to AWS services and resources securely. Using IAM, you can create and manage AWS users and groups, and use permissions to allow and deny their access to AWS resources. 

Buurst recommends use of an Identity and Access Management (IAM) when creating your SoftNAS instance. You will need to create both an IAM Policy and IAM Role for use with your SoftNAS instance.

Creating the IAM Policy for SoftNAS®

To create an IAM Policy for use with SoftNAS you will need to use the AWS IAM Console at https://console.aws.amazon.com/iam/home#/home or search for IAM in the AWS services from the AWS Console home.

...

5. Copy the JSON text shown under IAM Role Policy below, and paste it into the AWS JSON editor and then click “Review policy” at the bottom of the page.

IAM Role Policy


{

  "Version": "2012-10-17",

  "Statement": [

    {

      "Sid": "Stmt1444200186000",

      "Effect": "Allow",

      "Action": [

        "ec2:ModifyInstanceAttribute",

        "ec2:DescribeInstances",

        "ec2:CreateVolume",

        "ec2:DeleteVolume",

        "ec2:CreateSnapshot",

        "ec2:DeleteSnapshot",

        "ec2:CreateTags",

        "ec2:DeleteTags",

        "ec2:AttachVolume",

        "ec2:DetachVolume",

        "ec2:DescribeInstances",

        "ec2:DescribeVolumes",

        "ec2:DescribeSnapshots",
 

        "aws-marketplace:MeterUsage",


        "ec2:DescribeRouteTables",

        "ec2:DescribeAddresses",

        "ec2:DescribeTags",

        "ec2:DescribeInstances",

        "ec2:ModifyNetworkInterfaceAttribute",

        "ec2:ReplaceRoute",

        "ec2:CreateRoute",

        "ec2:DeleteRoute",

        "ec2:AssociateAddress",

        "ec2:DisassociateAddress",

        "ec2:StopInstances",
        "ec2:RebootInstances",

        "s3:CreateBucket",

        "s3:Delete*",

        "s3:Get*",

        "s3:List*",

        "s3:Put*"

      ],

      "Resource": [

        "*"

      ]

    }

  ]

}

...

Note: The IAM Policy name created must be SoftNAS_HA_IAM or SOFTNASSoftNAS_DISK_IAM.


7. Your IAM Policy for use with SoftNAS should now be created.


Creating an IAM Role for use with SoftNAS

To create an IAM Role for use with SoftNAS and a previously created IAM Policy, you will need to use the AWS IAM Console at https://console.aws.amazon.com/iam/home#/home or search for IAM in the AWS services from the AWS Console home.

...

  1. From within the IAM Console, from the navigation pane, click Roles, and then click Create Role.




  2. Select EC2 as the service for this role by clicking the “EC2” service and then click “Next: Permissions” at the bottom of the page.



  3. Attach the permissions policy that you previous created for use with SoftNAS by checking the check box next to that policy, and then click “Next: Review”.




  4. Give your new role a “Role name” and “Role description” and then click “Create role”.  The role name must be SOFTNASSoftNAS_HA IAM or SOFTNASSoftNAS_DISK_IAM.
     



  5.  Your new SoftNAS role should now be created.




    This role can be used later when launching your SoftNAS AWS instance.

...