What’s the best way to integrate AWS with IIQ.
The connector documentation is not helping us to create the IAM user in AWS. Is there any cleat documentation available for this? Or steps listed somewhere that we could follow.
We do not want to install IIQ on AWS and use IAM role rather we want to use IAM User to connect on-prem IIQ to AWS.
Any help is much appreciated.
Hello,
Could you provide specific details on what you’re looking for? You can look at using AWS connector and provide the below details -
Setup a provisioning policy to create an account on AWS system (sample fields that we used) -
con_prov_policy_AWS_UserName
con_prov_policy_AWS_AccountId
con_prov_policy_AWS_password
con_prov_policy_AWS_AccessKey
con_prov_policy_AWS_Path
–Akash
We are trying to set up accounts and roles in AWS to be utilized in IIQ.
AWS connection:
Authentication Method = IAM user
Role name = SPServiceIAMUser
Include AWS Account IDs = 123456, 987654
When we use one account ID (eg:123456), we were able to successfully connect to AWS.
When we use the other ID, we are getting the below error.
We are getting the same error when trying with multiple account IDs (2 or more id).
[ InvalidConfigurationException ] [ Possible suggestions ] Ensure that the required role is created in the specified AWS accounts and the user has required permissions. [ Error details ] Test connection failed for accounts [123456] Failure Reason=User: arn:aws:iam::123456:user/SPServiceIAMUser2 is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::123456:role/SPServiceIAMUser (Service: AWSSecurityTokenService)
How do we connect to multiple accounts and make it work?
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.