Before configuring the Ark console on an Amazon host and creating users, you must create an Amazon service user and service role. Ark uses the service role when performing Ark management functions (such as console backups). The Ark console uses the service role credentials (the cross account keys) to assume the IAM roles assigned to Ark users. This enables Ark to securely manage AWS resources.When configuring the Ark console, you are required to provide the setup dialog with details about the AWS service user and the service role. Specify:
• the Amazon Role ARN (resource name) that will be used by the Ark service in the Service Account Role ARN field.
• the Amazon external ID that will be used by the Ark service user in the Service Account External ID field.
• the AWS_ACCESS_KEY_ID associated with the AWS role used for account administration in AWS Access Key field.
• the AWS_SECRET_ACCESS_KEY associated with the AWS role used for account administration in AWS Secret Key field.