Grant access to AWS Resources

Introduction

This guide explain step by step how to grant access to the Amazon Web Services(AWS) S3 to the Yellowme team.

Prerequisites

1. Have an AWS account, if you don't have one follow this guide.
2. The external ID provided by Yellowme.

Grand access

Step 1 - Create a Role

1. Sign in to the AWS Management Console.
2. Open the IAM Console.
   1. Click Services on the right of the navigation bar.
   2. Click IAM _on the Security, Identity & Compliance_
3. In the navigation pane of the IAM console, choose Roles.
4. On Roles
   1. Select Create new role
5. On Select role type
   1. Select the option Role for cross-account access.
   2. Select "Provide access between AWS accounts you own.
6. On Establish trust
   1. Type the Account ID field the key 818618036329.
   2. Click on Next Step.
7. On Attach Policy
   1. In the filter bar type AmazonS3FullAccess.
   2. Select the AmazonS3FullAccess checkbox.
   3. Click on Next step.
8. On Set role name and review
   1. Type the ManageS3 on the Role name field.
   2. Click on Create role.

Step 2 - Obtain the Amazon Resource Name(ARN) for the role

1. In the navigation pane of the IAM console, choose Roles.
2. In the list of roles, choose the ManageS3 role.
3. In the Summary section of the details pane, copy the Role ARN value.

Step 3 - Give the ARN to Yellowme

1. Send the ARN to Yellowme via email.

References

1. Tutorial: Delegate Access Across AWS Accounts Using IAM Roles