Selecting the authentication type and setting up rolesEdit online GuardiumĀ® supports three authentication types to connect to the AWS Secrets Manager and AWS database services - Security Credentials, IAM Role, and IAM Instance Profile. Set up and configure the authentication type for your Guardium datasource. Authenticating by using security credentialsCreate an access key ID and a secret access key to use this legacy authentication type.Authenticating by using IAM RoleThe IAM role authentication type allows for an IAM Instance Profile to be assumed by specifying a Role Amazon Resource Name (ARN) in addition to an access key ID and secret access key. In this authentication scenario, temporary security credentials are used to connect to AWS Secrets ManagerAWS Secret Manager or AWS database services.Authenticating by using IAM instance profileYou can authenticate by using the IAM instance profile only when you use a Guardium instance that is deployed on AWS EC2.Parent topic: Managing datasource credentials with AWS Secrets ManagerPrevious topic: Creating a secret keyNext topic: Configuring the AWS Secrets Manager on your Guardium system