AWS Cloud Account Authorization¶

AWS account types support two authentication methods: Access Keys and Role Authorization. Role Authorization does not require long-term Access Keys or Secret Keys.

In Integrations > Cloud Account Management, click Create Cloud Account, select AWS, and then choose the authentication method.

Access Keys¶

1. Select the authentication method Access Keys.
2. Choose the China region or the International region as needed.
3. Enter the AWS primary account ID.
4. Enter the Access Key and Secret Key from the AWS side.
5. Enter an account alias for display in Guance. Data collected from this account will automatically carry this alias.
6. Optionally set account tags.
7. Click Test, then click Save after the test passes.

Role Authorization¶

With Role Authorization, Guance uses the IAM role you create in AWS to access authorized cloud resources.

1. Select the authentication method Role Authorization.
2. Select the region: choose the China region or the International region as needed.
3. In AWS IAM, create a role, select AWS account > Another AWS account, enter the Guance platform account ID, check Require external ID, then under Add permissions, select Create inline policy and paste the complete collection-permission JSON. For detailed steps, see AWS Cloud Integration Role Authorization Configuration.
4. Enter your own AWS account ID, that is, the account ID that created this role.
5. Enter the name of the role already created on the AWS side.
6. Enter an account alias for display in Guance. Data collected from this account will automatically carry this alias.
7. Optionally set account tags.
8. Click Test, then click Save after the test passes.

After saving the cloud account, optionally configure the integration to start collecting data from the corresponding AWS services.