How to create a restricted AWS IAM user

Security-as-a-Service for Amazon Web Services (AWS) is a malware protection service developed by Bitdefender for Amazon Elastic Cloud Compute (EC2) environments. Built on Security for Virtualized Environments (SVE) by Bitdefender, an innovative and comprehensive solution designed specifically for virtualized environments, Security-as-a-Service for AWS protects Amazon EC2 instances running Windows or Linux operating systems.

This article shows you how to create an AWS Identity and Access Management (IAM) user with the minimum required privileges for use with Security-as-a-Service for AWS.

Overview

To integrate with your AWS account, Security-as-a-Service for AWS requires an AWS access key (the access key ID and secret access key). You can provide either the access key of your AWS account or that of an AWS Identity and Access Management (IAM) user. To learn about IAM users, refer to the AWS Documentation.

Note

It is recommended to set up integration with your AWS account using the access key of an IAM user created specifically for this purpose.

Required Permissions

The IAM user requires minimum read-only permissions over your Amazon EC2 instances, as described by the following policy statement:

{

"Statement": [

{

"Action": [

"ec2:DescribeInstanceStatus",

"ec2:DescribeInstances"

],

"Effect": "Allow",

"Resource": [

"*"

]

}

]

} 

How to create an AWS IAM user

To create an IAM user:

1. From the AWS Management Console, select the IAM service.
2. Go to the Users section.
3. Click Create New Users. The Create User window is displayed.
4. Enter a suggestive name for the user. If you create the user specifically for Security-as-a-Service for AWS, you can name it Bitdefenderfor example.
5. Click Create.
6. Download or keep a record of the user security credentials.
7. Click Close Window. You can find the newly created user in the list.

After you have created the user, you must add the necessary permissions:

1. Select the user and click the Permissions tab.
2. Click Attach User Policy. The Manage User Permissions window is displayed.
3. Select Custom Policy.
4. Enter a suggestive name for the policy.
5. In the Policy Document field, copy the policy statement provided before.
6. Click Apply Policy.

1. 1
2. 1
3. 0
4. 1
5. 0