How to Link AWS Deployment User?
In this chapter, you will learn what is a Deployment User and how you can link an existing Deployment User with your AWS subscription.
- Select your AWS Free 60-Day Trial from the dropdown menu, if not already selected.
- The Account Name "NCache User" is pre-populated for you.
- Click on the Link AWS Deployment User button to proceed.
What is a Deployment User?
A Deployment User is a user who has the rights to deploy resources through the NCache Cloud Portal. This user must be a part of your AWS subscription and must have a certain set of roles assigned to it. The NCache Cloud Portal uses this role-based user's authentication details to fetch and create resources.
Permission Set
Following is the list of all permissions required by the Deployment User for the provisioning of various resources such as Virtual Machine, Public IP, Network Interface, Virtual Disk, and so forth.
{
"RoleDefinition": {
"properties": {
"roleName": "NCacheCloudAdmin",
"type": "CustomRole",
"description": "Minimum amount of permissions required to monitor NCache SaaS",
"assignableScopes": [],
"permissions": [
{
"actions": [
"ec2:DescribeAddresses",
"ec2:DescribeInternetGateways",
"ec2:DescribeNetworkAcls",
"ec2:DescribeVpcs",
"ec2:DescribeSubnets",
"ec2:DescribeTags",
"ec2:DescribeSecurityGroups",
"ec2:DescribeNetworkInterfaces",
"ec2:DescribeRouteTables",
"ec2:CreateRoute",
"ec2:DeleteRoute",
"ec2:DetachInternetGateway",
"ec2:CreateTags",
"ec2:AuthorizeSecurityGroupIngress",
"ec2:AuthorizeSecurityGroupEgress",
"ec2:DeleteKeyPair",
"ec2:AttachInternetGateway",
"ec2:CreateKeyPair",
"ec2:RunInstances",
"ec2:DescribeInstanceStatus",
"ec2:DescribeInstances",
"ec2:TerminateInstances",
"ec2:StopInstances",
"ec2:StartInstances",
"ec2:RebootInstances",
"ec2:DescribeImages",
"iam:GetUser",
"iam:ListAttachedUserPolicies",
"iam:GetPolicy",
"iam:GetPolicyVersion",
"iam:ListEntitiesForPolicy",
"iam:ListPolicies"
],
"notActions": []
}
]
}
}
}
Delete Deployment User
A linked Deployment User can aslo be deleted from the NCache Cloud Portal. Do note that we do not actually remove the user from AWS, we just delete the access tokens from our database.
Note
Upon deleting the Deployment User, you will not be able to perform any managerial operations such as Start, Stop, or Restart the VM.