Step-3 : Create an IAM role for DigitalEx

This step only provides illustrations on creating a role but a user with access/secret key is also supported. If you wish to create a user, please assign similar permissions as documented for a role below. We encourage a use of a Role over a User as its more secure.

Login to AWS Member account you’re trying to onboard as an Administrator if not already logged in. And navigate to IAM service using AWS search bar.
On a IAM Console, Select Roles from the left menu, and click Create role. One the create role screen please select the configuration as follows,
1. Trusted entity type: AWS Account
2. An AWS account: Choose Another AWS account and fill in the account number as 911403356698
3. External ID: In this field, please put the Tenant ID for your DigitalEx account. Please consult your partner company to share tenant id before moving forward.
4. Finally click Next
5. Click Next, on next screen for permissions, please select the aws managed policy called ReadOnlyAccess
6. Click Next again & on a final page, give a name to the role & click Create role
7. Once the role is created, please note the ARN of a role, which will be required in the next step.