# AWS IAM users

### Objective <a href="#toc46419096" id="toc46419096"></a>

This guide will help you to create or retrieve your AWS account access keys, secret access key, and AWS region. This will also help you to assign permissions to the AWS account.

### Pre-requisites <a href="#toc46419097" id="toc46419097"></a>

1. **An active AWS Account**

You should have an active AWS Account. If you do not have it, you can create an AWS account at <https://portal.aws.amazon.com/billing/signup#/start>

### Step 1 Sign-in to the AWS Management Console <a href="#toc46419099" id="toc46419099"></a>

Sign in to the AWS Management Console at <https://console.aws.amazon.com/console/home>

### Step 2 Creating an IAM User in Your AWS Account <a href="#toc46419100" id="toc46419100"></a>

You can create one or more IAM users in your AWS account.

1. Open the IAM console at <https://console.aws.amazon.com/iam/> or if you are already logged in, perform a search for **IAM**&#x20;
2. In the left navigation pane, choose **Users** and then choose **Create user**&#x20;

<figure><img src="https://1107164708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M8XHvUsfyTUFLvToHqD%2Fuploads%2FdVTpDIl886nE2CEosah7%2Fcreateuser.png?alt=media&#x26;token=544db4c1-0b8b-4b7d-9e12-459171a391b3" alt=""><figcaption></figcaption></figure>

3. The Specify user details screen opens. Enter a User name and press **Next**. This user will not need Console access.

<figure><img src="https://1107164708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M8XHvUsfyTUFLvToHqD%2Fuploads%2FlLHPFIKla6sUReuC48aw%2FuserDetails1.png?alt=media&#x26;token=829fb2b1-273b-4e11-ac9f-b959dd33f682" alt=""><figcaption></figcaption></figure>

4. On the Set Permissions screen, press **Next**. No Groups will be needed.

<figure><img src="https://1107164708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M8XHvUsfyTUFLvToHqD%2Fuploads%2Fce6KJAnoAgamSbKSIkrW%2FSetPermissions.png?alt=media&#x26;token=5e0bec9a-ab6c-4a74-af57-3cc545c9a923" alt=""><figcaption></figcaption></figure>

5. On the Review and Create screen, press **Create User**

<figure><img src="https://1107164708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M8XHvUsfyTUFLvToHqD%2Fuploads%2F2EcguMMb9dUNbmh86YLN%2FcreateUserFinal.png?alt=media&#x26;token=090de3b7-4ea7-4c0d-9fd7-18ea3cff290e" alt=""><figcaption></figcaption></figure>

6. This user will be used just for programmatic purposes. Also, by selecting just this option, the user cannot login at the AWS management console.
7. Click **Next** and you should see a permissions screen.
8. Select **Attach existing policy directly** option as shown below

<figure><img src="https://1107164708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M8XHvUsfyTUFLvToHqD%2Fuploads%2FwEVvJFsOcSwg15yUESxc%2FAttachExistingPolicy.png?alt=media&#x26;token=63467270-6250-4c64-b2a2-a914aaa9b39b" alt=""><figcaption></figcaption></figure>

9. You can select one or more policies from this screen, this will give permissions to the user to access required AWS resources. For example: If you are planning to use this user for Amazon DynamoDB integration with iX Hello, then search for DynamoDB in the search box.
10. This will list all the readymade policies for the DynamoDB.
11. Select *AmazonDynamoDBFullAccess* as shown in below screenshot.

<figure><img src="https://1107164708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M8XHvUsfyTUFLvToHqD%2Fuploads%2FM8XaG7eadJmtcM96I2DT%2FdynamoDB.png?alt=media&#x26;token=44aa434e-6761-4fb6-9a86-cadab57d8980" alt=""><figcaption></figcaption></figure>

11. Once a policy is selected, click on **Next**

<figure><img src="https://1107164708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M8XHvUsfyTUFLvToHqD%2Fuploads%2FxynjVIoJQqNwxk4GaUMx%2FaddUser.png?alt=media&#x26;token=c23f5c0a-f841-430b-8d24-d0763dde8bea" alt=""><figcaption></figcaption></figure>

1. &#x20; Click **Create User**. The user will be created and you should see a success screen as shown below.
2. This success screen has the credentials (Access key and Secret access key). Make sure you copy it and save it to safe place as **the Secret access key will never be displayed again on AWS management console.**
3. There is also an option to Download .csv. We advise users to download the file and keep it safe. The .csv contains the created IAM user information like Username, Access key ID and Secret access key.

   <figure><img src="https://1107164708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M8XHvUsfyTUFLvToHqD%2Fuploads%2FvNKftHhqJCWizBWSYJe2%2FDownloadCSV.png?alt=media&#x26;token=8e1088d9-e6a3-41db-a4e2-bdcc7ac2cae2" alt=""><figcaption></figcaption></figure>

Congratulations! You have successfully created an IAM user and assigned permissions to access specific AWS service.

### List of Policies for various Amazon integrations with the iX Hello platform. <a href="#toc46419101" id="toc46419101"></a>

Below table shows a list of various Amazon service integrations with iX Hello and required policy for the IAM user that you use for the integration.

<table data-header-hidden><thead><tr><th width="117.33333333333331"></th><th></th><th></th></tr></thead><tbody><tr><td></td><td>Voice Integration Type</td><td>IAM User Policy (Step 2 – 8.3)</td></tr><tr><td>1</td><td>Amazon DynamoDB</td><td>AmazonDynamoDBFullAccess</td></tr><tr><td>2</td><td>Amazon Kendra</td><td>AmazonKendraFullAccess</td></tr><tr><td>3</td><td>Amazon Connect</td><td>AmazonConnectFullAccess</td></tr><tr><td>4</td><td>Amazon EventBridge</td><td>AmazonEventBridgeFullAccess</td></tr><tr><td>5</td><td>Amazon Lex</td><td>AmazonLexFullAccess</td></tr></tbody></table>

### AWS Region <a href="#toc46419102" id="toc46419102"></a>

When you create an integration on iX Hello, you may have to provide AWS Region name. If you are unsure which region you are using for the AWS service, you can find the AWS region easily by just 2 simple steps.

1. Make sure you have selected the AWS service for which you want to find the Region.
2. Click the geographical name in the top right corner. A dropdown appears.

<figure><img src="https://1107164708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M8XHvUsfyTUFLvToHqD%2Fuploads%2FW9krmcU57F7iWNamJnxA%2FAWSRegion.png?alt=media&#x26;token=7180f274-1ec6-4116-86d5-cad03c7e0a6d" alt=""><figcaption></figcaption></figure>

3. The region name is the value in the xx-xxxx-# format. In the example above, the needed value will be ***us-east-2***

You will need this name in the iX Hello platform.
