mirror of
https://github.com/openshift/installer.git
synced 2026-02-05 15:47:14 +01:00
48 lines
2.0 KiB
Markdown
48 lines
2.0 KiB
Markdown
# IAM User
|
||
|
||
When you first create an Amazon Web Services (AWS) account, you begin with a single sign-in identity that has complete access to all AWS services and resources in the account. This identity is called the [AWS account *root user*][aws-account-root-user]. You can sign in as the root user using the email address and password that you used to create the account.
|
||
|
||
This is a highly privileged account and not recommended for usage beyond configuring initial account and
|
||
billing settings, an initial set of users, and locking it down.
|
||
|
||
Before proceeding with the OpenShift install, you should create a IAM administrative user following the steps
|
||
outlined here:
|
||
|
||
[AWS: Creating an IAM User in Your AWS Account][user-create]
|
||
|
||
## Step 1: Name User, Identify Programmatic Access
|
||
|
||
In this step, you identify the IAM user name. We require programmatic access to AWS (via generated access key), check
|
||
this box.
|
||
|
||
|
||
|
||
## Step 2: Attach Administrative Policy
|
||
|
||
Many permissions are required by the AWS installer. A specific set of policies and services will be identified at a
|
||
future date so a specific policy can be created and attached. Until then, attach the predefined "AdministratorAccess"
|
||
for the installation to use.
|
||
|
||
|
||
|
||
## Step 3: Optional, Skip
|
||
|
||
Step 3 is optional and we’ll skip it.
|
||
|
||
## Step 4: Review Settings
|
||
|
||
Step 4 allows us to review the settings we've selected. Make sure your screen reflects your chosen name and
|
||
AdministratorAccess
|
||
|
||
|
||
|
||
## Step 5: Acquire Access Key and Secret
|
||
|
||
In Step 5, you need to save the access key ID and secret access key values to configure your local machine to run
|
||
the installer. This step is your only opportunity to collect those values.
|
||
|
||
|
||
|
||
[aws-account-root-user]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_root-user.html
|
||
[user-create]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_users_create.html
|