Table of Contents Previous Next


3 Installing the EDB Ark Console : 3.1 Installing EDB Ark for Amazon AWS : 3.1.4 Creating an Amazon Role and Registering an Ark Console User

To define an Amazon role, connect to the Amazon management console, and through the Identity and Access Management dashboard to the Roles dashboard, and click the Create role button.
C:\Users\susan\AppData\Local\Temp\vmware-susan\VMwareDnD\0a0d0e58\Screen Shot 2018-04-11 at 1.14.12 PM.png
When the Create role dialog opens (shown in Figure 3.20), select the AWS service button and highlight the EC2 bar, and click Next: Permissions to continue.
C:\Users\susan\AppData\Local\Temp\vmware-susan\VMwareDnD\1a0e3e1d\Screen Shot 2018-04-11 at 1.16.37 PM.png
When the Attach permissions policies dialog opens (see Figure 3.21), do not specify a policy; instead, click Next: Review to continue.
Use the Review dialog (see Figure 3.22) to provide a name and a description; then, click Create role.
C:\Users\susan\AppData\Local\Temp\vmware-susan\VMwareDnD\1a8f3f3f\Screen Shot 2018-04-11 at 1.18.40 PM.png
The role will be displayed in the role list on the Amazon IAM Roles page. Highlight the role name to review account details (see Figure 3.23).
C:\Users\susan\Desktop\chop.png
The Summary tab will display a Role ARN, but the ARN will not be enabled until the security policy and trust policy are updated.
After completing the Create Role wizard, you must modify the inline policy and trust relationship (defined by the security policy) to allow Ark to use the role. Click the Add inline policy button to add a security policy.
Copy the permission policy text into the JSON tab (see Figure 3.24). The permission policy required by Ark is available in Section 10.3.
C:\Users\susan\AppData\Local\Temp\vmware-susan\VMwareDnD\1a853f8c\Screen Shot 2018-04-11 at 1.24.48 PM.png
Then, click Review Policy to return to continue to the Review policy page and provide a name for the policy. Then, click the Create policy button to return to the role summary page.
Select the Trust relationships tab, and click the Edit trust relationship button to update the trust relationship assigned to the role (see Figure 3.25).
C:\Users\susan\AppData\Local\Temp\vmware-susan\VMwareDnD\0c3907ff\Screen Shot 2018-04-12 at 7.58.51 AM.png
Replace the displayed content of the policy document with the content of the file available in Section 10.2.
Please note: EDB-ARK-SERVICE is a placeholder within the trust policy provided in section 10.4. You must replace the placeholder with the External ID provided on the Step 2 tab of the Ark console New User Registration dialog.
To retrieve the External ID, open another browser window and navigate to the Log In page of your Ark console. Click the Register button to open the New User Registration dialog (shown in Figure 3.26).
Screen shot 2014-05-21 at 5
Enter user information in the User Details box located on the Step 1 tab:
Enter your first and last names in the First Name and Last Name fields.
Provide an email address in the Email field; please note that the email address is used as the Login identity for the user.
Use the drop-down listbox in the Cloud Provider field to select the host on which the cloud will reside.
When you've completed Step 1, click Next to open the Step 2 tab. The Step 2 tab of the New User Registration dialog will display a random External ID number. Copy the External ID from the Step 2 dialog into the trust policy, replacing EDB-ARK-SERVICE. Please note that you must enclose the External ID in double-quotes ("). Click the Update Trust Policy button to save your edits and exit the dialog.
C:\Users\susan\Desktop\chop.png
Screen shot 2014-07-22 at 3
Enter your Amazon IAM role ARN in the Role Arn field on the Step 2 dialog, and click Finish to complete the registration (see Figure 3.28). Select Cancel to exit without completing the registration.
C:\Users\susan\AppData\Local\Temp\vmware-susan\VMwareDnD\7ab1d4e9\Screen Shot 2017-01-12 at 10.19.20 AM.png
Figure 3.29 - The Login/Register dialog.
Provide the email address in the Email field, and the associated password in the Password field, and click Log In to connect to the Ark management console (shown in Figure 3.30).
C:\Users\susan\Desktop\Screen Shot 2018-04-12 at 9.25.50 AM.png
Figure 3.30 - The Dashboard tab of the Ark management console.

3 Installing the EDB Ark Console : 3.1 Installing EDB Ark for Amazon AWS : 3.1.4 Creating an Amazon Role and Registering an Ark Console User

Table of Contents Previous Next