In order to install the AWS Replication Agent, you must first generate the required AWS credentials. You can create temporary credentials with AWS STS.
Temporary credentials
Before you install the AWS Replication Agent, you need to generate temporary AWS security credentials. The temporary credentials provided by AWS Elastic Disaster Recovery utilize a similar mechanism to the one used by IAM Roles Anywhere.
To create temporary credentials, take the following steps:
-
Create a new IAM Role with the AWSElasticDisasterRecoveryAgentInstallationPolicy policy.
-
Request temporary security credentials via AWS STS using the AssumeRole API.
Learn more about how temporary credentials work.
Note
You can also create the default IAM role with the required permissions as an instance profile, as described in Instance profile role installation.
