Configuring AWS for cross-account support

In AWS, you must separately configure both the database (RDS) in its account, and the Imperva Gateway (EC2 instance) in its separate account.

To configure your AWS EC2 account (DAM Gateway and MX) for cross -account support:

1. Configure a policy:
   1. In your AWS EC2 account, configure an existing policy or create a new one. Under IAM > Policies, select the policy.
   2. Under the Permissions tab, verify that the text below appears. If it does not, edit the text so that it appears exactly as follows:

      {

      "Version": "2012-10-17",

      "Statement": [

      {

      "Sid": "VisualEditor0",

      "Effect": "Allow",

      "Action": "sts:AssumeRole",

      "Resource": "arn:aws:iam::<<rdsAccount>>:role/<<rdsAccount-Role>>"

      }

      ]

      }

      Where <<rdsAccount>> and <<rdsAccount-Role>> are replaced by the values pertaining to your RDS account.

   3. Save the changes in the normal way.
2. Create a new role:
   1. Under IAM > Roles, click Create role.
   2. Click AWS Service.
   3. Under Use case, click EC2.

      

   4. Click Next.
   5. In the Add permissions window, check the box next to the policy you configured in step 1.
   6. Click Next.
   7. Type a Role name of your choice.
   8. Click Create role.

   {

   "Version": "2012-10-17",

   "Statement": [

   {

   "Effect": "Allow",

   "Principal": {

   "Service": "ec2.amazonaws.com"

   },

   "Action": "sts:AssumeRole"

   }

   ]

   }