To create the Ark console's service user account, connect to the Amazon AWS management console, and navigate through the IAM menu (Identity and Access Management) to the Users dashboard; select the Add user button to open the Add user dialog (shown in Figure 3.2).On the Add user dialog:
• Provide a name for the service user account in the User name field.
• Check the box to the left of Programmatic access.Click Next: Permissions to continue. Click the Attach existing policies directly button, and then the Create policy button to open the Create policy dialog in a new tab.When the Create policy dialog opens, select the JSON tab, and provide the policy definition (see Figure 3.3).A sample policy definition is available in Section 10.1; after copying in a policy, click the Review policy button to continue.Provide a name and a description for the service policy definition (see Figure 3.4), and click the Create policy button to continue.Return to the Add user tab, and click the Refresh button. Check the box to the left of the new policy, and click Next:Tags (see Figure 3.5).IAM user tags are optional; you can click Next: Review to continue.Review the account details, and click the Create user button to create the user (see Figure 3.6). The AWS console will confirm that the user has been added successfully (see Figure 3.7).Keep a copy of the access key values displayed on the console; you must provide the values when configuring your Ark console:
• Provide the Access key id in the AWS Access Key field on the Ark console setup dialog.
• Use the Show button to display the Secret access key. You must provide the Secret access key in the AWS Secret Key field on the Ark console setup dialog.