AWS IAM User

1. Create an IAM user with the following predefined policy:

• ReadOnlyAccess

Or for more granular access, assign the following predefined policies to the user:

• AmazonEC2ReadOnlyAccess
• AmazonECS_FullAccess
• AmazonMSKReadOnlyAccess
• AmazonRDSReadOnlyAccess
• AWSLambda_ReadOnlyAccess
• ElasticLoadBalancingReadOnly

2. Create the following Kubernetes secret in the same namespace as the Causely mediator:

aws-secret.yaml

apiVersion: v1
kind: Secret
type: Opaque
metadata:
  name: aws-secret
  namespace: causely
stringData:
  AWS_REGION: region-code
  AWS_ACCESS_KEY_ID: YYY
  AWS_SECRET_ACCESS_KEY: ZZZ

3. Update the Causely mediator with the following helm values:

causely-values.yaml

scrapers:
  aws:
    enabled: true
    accounts:
      - arn: arn:aws:organizations::111111111111:account/o-pyxgi8opc5/123456789012
        secretName: aws-secret