IAM credential setup

to allow amberflo to make api calls to aws on your behalf, you need to assign a role in your aws account with the required permissions step 1 create a policy navigate to the policy creator in the aws console create a new policy named amberflomarketplacepermissions with permissions shown below amberflomarketplacepermissions { "version" "2012 10 17", "statement" \[ { "action" \[ "aws marketplace\ batchmeterusage", "aws marketplace\ getentitlements", "aws marketplace\ listentities", "aws marketplace\ describeentity" ], "effect" "allow", "resource" " " } ] } step 2 create a role go to the role creator in the aws console choose another aws account as the trusted entity enter amberflo’s aws account id 994970626209 ensure require mfa is unchecked click next permissions and attach the policy created in step 1 click next tags and (optionally) add any tags you need amberflo does not require any specific tags click next review and name the role amberflo marketplace step 3 retrieve the role arn navigate to the newly created role via the roles page in the aws console copy the role arn it should look like arn\ aws\ iam \<aws account id>\ role/amberflo marketplace add this arn to your amberflo account's aws marketplace payment settings