Creating an AWS IAM Role and Instance Profile

On This Page

Overview

At times, the platform's EC2 instances need to access the AWS API. For example, to achieve high availability, the instances within a cluster share a single secondary IP address, which is allocated to a specific instance at any given moment. Migrating this secondary IP to another instance requires an AWS API call to update the internal AWS network. To perform an AWS API call, the platform must be authenticated using AWS credentials with the necessary permissions for performing this operation. To allow this, the platform installer needs to receive the name of an AWS instance profile that contains an IAM role with the required permissions.

This guide walks you through the steps for creating the required IAM role for the platform installation, using the AWS Management Console. When using the console to create a role for Amazon EC2, the console automatically creates an instance profile with the same name as the role. You'll need to provide this name as part of the platform installation, as outlined in the platform's AWS cloud installation guide.

Note
You can rotate the IAM keys. First contact Iguazio's support team, and then follow the AWS guidelines.

Step 1: AWS Login

Log into your AWS Management Console and select the IAM service.

Select IAM service

Step 2: Create a New Role

In the side navigation menu, select Access management | Roles, and then select Create role.

Create role

Step 3: Select the AWS EC2 Use Case

Select the AWS service trusted-entry type and the EC2 use case, and then select Next: Permissions.

Select EC2 use case

Step 4: Create a Policy

Select Create policy.

Create policy

Under the JSON tab, paste the contents of this policy and select Review policy. Give the policy a name (for example, "AssignPrivateIPAddresses" — recommended), optionally add a description, and select Create policy.

Set policy

Step 5: Create the Role

Filter the policies for the name of the policy that you created and select the policy.

Select policy
Select Next: Tags and optionally assign role tags.

Enter "IguazioDataScienceNode" as the role name, optionally add a description, and select Create role.

Additional Resources

See Also