IAM credential setup

To make API calls to AWS on your behalf, you must assign Amberflo a role with permission.

Using the Policy Creator, create a policy in your AWS account called AmberfloMarketplacePermissions with permissions shown below:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": [
                "aws-marketplace:BatchMeterUsage",
                "aws-marketplace:GetEntitlements",
                "aws-marketplace:ListEntities",
                "aws-marketplace:DescribeEntity"
            ],
            "Effect": "Allow",
            "Resource": "*"
        }
    ]
}

Navigate to the Role Creator. Here you should choose Another AWS account. Enter Amberflo's account ID (994970626209). Note that Require MFA should remain unchecked.

Click Next: Permissions, and under Attach permissions policies, attach the policy you created in the step above.

Click Next: Tags and add any tags you want. Amberflo doesn't require any specific tags.

Click Next: Review and name the role amberflo-marketplace.

Navigate to the newly created role from the Roles page and take note of the role ARN. It should have a format like arn:aws:iam::<AWS_ACCOUNT_ID>:role/amberflo-marketplace. Add this ARN to your Amberflo account payment settings in the next step.