Amazon Web Services

Amazon Web Services (AWS) offers reliable and scalable cloud computing services.

Prerequisites

• Administrator access to the Harmony SaaS Administrator Portal.

• Administrator account with the AWS Management Portal.

Integrating AWS

1. Log in to your AWS Management Portal.

   1. Search and access the IAM service.

      

   2. From the left navigation pane, click Access management > Policies.

      

   3. Click Create Policy.

   4. Click JSON and then paste this code in the Policy editor.

      

      Copy

      {
          "Version": "2012-10-17",
          "Statement": [
              {
                  "Sid": "VisualEditor0",
                  "Effect": "Allow",
                  "Action": [
                      "ec2:Describe*",
                      "iam:GenerateServiceLastAccessedDetails",
                      "iam:Get*",
                      "iam:List*",
                      "iam:GenerateCredentialReport",
                      "ecs:Describe*",
                      "eks:Describe*",
                      "eks:List*",
                      "ecs:List*",
                      "ec2:Get*",
                      "es:List*",
                      "elasticloadbalancing:Describe*",
                      "ssm:Get*",
                      "ssm:List*",
                      "ssm:Describe*",
                      "rds:List*",
                      "rds:Describe*",
                      "s3:List*",
                      "s3:Get*",
                      "cloudtrail:Get*",
                      "cloudtrail:List*",
                      "cloudtrail:Describe*",
                      "cloudfront:List*",
                      "cloudfront:Get*",
                      "Workspaces:Describe*",
                      "Workspaces:List*",
                      "Lambda:Get*",
                      "Lambda:List*",
                      "apigateway:Get*",
                      "route53:Get*",
                      "route53:List*",
                      "organizations:Describe*",
                      "organizations:List*",
                      "waf:GetWebACL",
                      "waf:ListWebACLs",
                      "waf-regional:GetWebACL",
                      "waf-regional:GetWebACLForResource",    
                      "waf-regional:ListWebACLs",
                      "wafv2:GetWebACL*",
                      "wafv2:GetWebACLForResource",
                      "wafv2:ListWebACLs",
                      "acm:DescribeCertificate",
                      "dynamodb:ListTables",
                      "dynamodb:DescribeTable",
                      "dynamodb:ListGlobalTables",
                      "dynamodb:DescribeGlobalTable",
                      "dynamodb:DescribeGlobalTableSettings",
                      "inspector:List*",
                      "inspector:Describe*"
                  ],
                  "Resource": "*"
              }
          ]
      }

      This code provides Harmony SaaS read-only access to EC2, ECS, EKS, IAM, SSM, RDS, S3, Workspaces, and Lambda services.

   5. Click Next.

      The Policy details page appears.

      

   6. In the Policy name field, enter a name for the policy. For example, Harmony-SaaS.

   7. (Optional) In the Description field, enter a description.

   8. Scroll down to the end and click Create policy.

   9. From the left navigation pane, click Access management > Users.

      

   10. Click Create user.

   11. In the User name field, enter a name and then click Next.

       

   12. In the Permissions options section, select Attach policies directly.

       

   13. In the Permissions policies section, select the policy you created and then click Next.

       The Review and Create page appears.

   14. Click Create user.

       The system creates a user with the details you provided.

   15. Click the user.

       The user details page appears.

       

   16. In the Summary section, click Create access key.

   17. In the Access key best practices & alternatives page, select Third-party service.

       

   18. In the Confirmation section at the bottom, select the I understand the above recommendation and want to proceed to create an access key checkbox and then click Next.

   19. (Optional) In the Description tag value field, enter a description.

       

   20. Click Create access key.

       

   21. Copy the Access key and Secret access key.

       To save the details to a CSV file, click Download .csv file.

2. Log in to your Harmony SaaS Administrator Portal.

   1. From the top banner, click Integration Manager.

   2. In the AWS widget, click Connect.

      

      The AWS window appears.

      

   3. Click Add key.

      The Add API key section appears.

      

   4. In the Secret key field, enter the Secret access key.

   5. In the Access key field, enter the Access key.

   6. Click Add key.