Set up credentials
Open the IAM console
Sign in to the AWS Management Console
and go to the IAM service.
Create an IAM user
In the left navigation, choose Users > Create user. Enter a user name
(for example,
adapt-readonly), then click Next.Attach a read-only policy
On the permissions page, choose Attach policies directly, search for
ReadOnlyAccess (
arn:aws:iam::aws:policy/ReadOnlyAccess), and select it.
Click Next, then Create user.Attach the narrowest policy that covers your use case. Service-specific
read-only policies (for example,
AmazonS3ReadOnlyAccess) are preferable
when you only need access to one service.Create an access key
Open the new user, go to the Security credentials tab, and under
Access keys click Create access key. Choose a use case such as
Third-party service or Other, then click Next and
Create access key.
Connect to Adapt
Add your credentials
Enter the values you gathered above, then click Add connection:
You can rename the connection and choose whether it is shared with your
organization or kept personal to you.
| Secret Name | Value |
|---|---|
AWS_ACCESS_KEY_ID | Your IAM access key ID |
AWS_SECRET_ACCESS_KEY | Your IAM secret access key |
AWS_REGION | Your default region, e.g. us-east-1 (optional) |
Security
- Credentials are encrypted at rest with AES-256
- Use a dedicated IAM user with a least-privilege, read-only policy such as
ReadOnlyAccessor a service-specific read-only policy - Rotate access keys regularly and deactivate keys you no longer use
- Never share your secret access key or commit it to source control