Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Published by Scroll Versions from space DEV and version r0871

...

Configure the following region-related settings.

D s config

PropertyDescription
aws.region

This value should already be defined for your AWS integration.

Configure roles

Through the AWS console, you can define and manage the policies for the IAM roles including those associated with your EC2 instance.

...

  1. Log in to the AWS console.

  2. Add the following policy to the instance profile corresponding to the EC2 instance.

    Code Block
    {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Sid": "VisualEditor0",
          "Effect": "Allow",
          "Action": [
            "secretsmanager:PutSecretValue",
            "secretsmanager:CreateSecret",
            "secretsmanager:DeleteSecret",
            "secretsmanager:GetSecretValue",
            "secretsmanager:TagResource"
          ],
          "Resource": "arn:aws:secretsmanager:<aws.region>:<your_aws_account_id>:secret:Trifacta/"<metadata.environment>/*"
        }
      ]
    }
    Resource valueDescription
    <aws.region>

    The region for which the access is provided. Verify that this value is set to aws.

    <metadata.environment>Differentiates the secrets between a test and production environment. You can set this value as per your requirements.
  3. Save the IAM role definition.

...