Creating the IAM Role for the Transfer Nodes

AWS Identity & Access Management (IAM) manages credentials for the ATC Manager and its nodes by assigning IAM roles to them when they are launched. Attaching policies to these roles grant the associated instances permissions such as starting, stopping, and terminating instances in EC2, updating records in the Route 53 service,or associating IAM roles with a new instance.

AWS uses IAM roles and policies to grant permissions to launch EC2 instances and update records in Route 53. The IAM roles for the cluster manager and transfer nodes require you to first configure policies, which are later attached to the role to manage permissions for the role. The following describes how to create an IAM role to grant transfer nodes the permissions to access EC2 and Route 53.

This IAM role requires that the following policies have already been configured:

  1. From the AWS console, go to Security & Identity > Identity & Access Management and select Roles from the Details sidebar.
  2. Click Create New Role.
  3. Name the new role atc-node.
  4. Select Amazon EC2 for the Role Type.
  5. Select the following policies and attach them to the role:
    • atc-ec2-policy
    • atc-route53-policy
    • atc-pass-node-role-policy
  6. Click Next Step, then Create Role.
The AWS Console redirects you to the Roles page. The new atc-node role appears in the list of roles.