...
Configure the following region-related settings.
D s config |
---|
Property | Description |
---|---|
aws.region | This value should already be defined for your AWS integration. |
Configure roles
Through the AWS console, you can define and manage the policies for the IAM roles including those associated with your EC2 instance.
...
Log in to the AWS console.
Add the following policy to the instance profile corresponding to the EC2 instance.
Code Block { "Version": "2012-10-17", "Statement": [ { "Sid": "VisualEditor0", "Effect": "Allow", "Action": [ "secretsmanager:PutSecretValue", "secretsmanager:CreateSecret", "secretsmanager:DeleteSecret", "secretsmanager:GetSecretValue", "secretsmanager:TagResource" ], "Resource": "arn:aws:secretsmanager:<aws.region>:<your_aws_account_id>:secret:Trifacta/"<metadata.environment>/*" } ] }
Resource value Description <aws.region>
The region for which the access is provided. Verify that this value is set to
aws.
<metadata.environment>
Differentiates the secrets between a test and production environment. You can set this value as per your requirements. - Save the IAM role definition.
...