Veritas Data Insight Administrator's Guide

To Create a user in AWS,

1. Log in to AWS management console

   Note:

   Make sure that you have enough permissions to create new user and group.

2. Click Services in the top left corner, scroll down and select IAM under Security, Identity, & Compliance
3. On the IAM dashboard, click Users in the left pane and click Add users in the right pane
4. On the Add user page, enter user name and check both check boxes in the Select AWS credential type
5. Click Next: Permission
6. On the Set permissions page, click Create group
7. In the Create group pop up, enter Group name and click Create policy.

   Note:

   There are multiple ways to grant necessary permissions. You can use Visual Editor, Manage Policy or you can add the JSON given below. If you are opting for Visual Editor or Manage Policy, refer to the JSON given below to know the required permissions.

8. On Create policy page, click JSON tab and add the following JSON

   {
   "Version": "2012-10-17",
   "Statement": [
   {
   "Sid": "VisualEditor0",
   "Effect": "Allow",
   "Action": [
   "s3:Get*",
   "s3:List*"
   ],
   "Resource": "*"
   },
   {
   "Sid": "VisualEditor1",
   "Effect": "Allow",
   "Action": [
   "s3:PutObject",
   "athena:StartQueryExecution",
   "athena:StopQueryExecution",
   "athena:GetQueryResults",
   "athena:GetQueryExecution",
   "glue:GetTable"
   ],
   "Resource": [
   "arn:aws:athena:*:<AWS account ID>:*",
   "arn:aws:glue:*:<AWS account ID>:*",
   "arn:aws:s3:::<Athena output bucket name>/*"
   ]
   }
   ]
   }

   In the above in line permission JSON,

   • Sid": "VisualEditor0 section will be used for scan, discovery, and classification (Get* and List*).

     "Resource" attribute: for scanning specific buckets, add the bucket names or add * to scan all the buckets.

   • Sid": "VisualEditor1" will be used for audits.

     "s3:PutObject" is used by Athena for storing report output internally.

9. Click Next: Tags
10. Do not add any tag, click Next: Review
11. Enter policy name and click Create policy
12. Navigate to the Create group browser window and click Refresh
13. Search the policy that was created, select the policy and click Create group.
14. Click Next: Tags
15. Click Next: Review
16. Click Create User
17. A new user gets created.