Authenticating by using IAM instance profile

You can authenticate by using the IAM instance profile only when you use a Guardium instance that is deployed on AWS EC2.

Before you begin

Create the IAM role, the related policies, and obtain the Role ARN. For more information, see Authenticating by using IAM Role.
Note:
  • When you configure the IAM instance profile for the AWS Secrets Manager on your Guardium system, you can use the Role ARN that is assigned on the AWS Secrets Manager or optionally use an alternate Role ARN.
  • To monitor streams by using different IAM roles, create an account for each IAM role.

Procedure

  1. Log in to the Amazon AWS management console and ensure that you are connected to the relevant data center.
  2. Access Services > Compute > EC2.
  3. Under Resources, click Running instances.
  4. Select the Guardium® EC2 image.
  5. Access Action > Instance settings > Attach/Replace IAM Role.
  6. From the IAM Role drop down, select the Role ARN that you created for the IAM Role configuration.

What to do next

Configure the AWS Secrets Manager on your Guardium system.