Objective: Create an AWS IAM Role to Allow Skyhigh to Scan S3 Buckets
Log in to Your AWS Account
From your Student Credentials page, click the AWS Account Login link to open it in a new window.
Enter the AWS Student Username and AWS Student Password at the login screen accordingly, and click Sign in. Note that the Account ID will be automatically populated. If you choose to cut and paste the credentials, please take care not to select any extra characters.
Configure an IAM Role for Skyhigh
In the search box, type IAM and click the IAM heading that appears.
In the IAM entry on the left, select Roles.
From the Roles screen, click the Create role button and select AWS account for the Trusted entity type.
Select Another AWS account and enable the Require external ID option.
Use the Skyhigh AWS Account ID and External ID obtained in the previous section for the Account ID and External ID, respectively (refer to your still-open browser tab with the Skyhigh Dashboard for these values).
Click the Next button.
On the Add permissions page, type s3full in the search box and select the AmazonS3FullAccess policy.
Now clear the search box, enter readonlyaccess, and select the filter type of AWS managed - job function and select the ReadOnlyAccess policy.
Click the Next button.
On the final Name, review, and create screen, enter SkyhighRole in the Role name box and click Create role.
You will be returned to the Roles list.
Obtain the ARN for the Skyhigh Role
From the Roles list, click SkyhighRole (the role you just created).
From the SkyhighRole page, copy the ARN value to your clipboard (use the copy icon).
Please keep your AWS tab open while you continue with the lab.
