Cisco SD-WAN Cloud OnRamp Configuration

Question

In the section "Create AWS Cloud Account", step 7 it says choose Key or IAM Role. I have an IAM User created in AWS and I have an API Key and Secret.

Cisco vManage is going to use this user to do whatever it needs in AWS. What permissions does Cisco vManage need? The documentation doesn't say.

You’ll need to reach out to AWS support for that answer. User permissions have nothing to do with networking, which means it’s off limits here. You can try asking on Super User or Server Fault but you may be told the same thing since it’s a permissions thing that may or may not be situational and be out of anyone’s control but yours and AWS support. — Jesse P., Commented Oct 26, 2021 at 21:39
How is AWS support supposed to know what permissions the Cisco vManage software requires to do whatever it needs to do? — Mike Marseglia, Commented Oct 26, 2021 at 21:47
You asked what “AWS permissions” you needed to give the user. If you wanted to ask something else you should ask it instead of what you actually asked. As it is, the permissions you’re requesting are on the AWS side, so AWS support should know the answer. — Jesse P., Commented Oct 26, 2021 at 21:48
Inside of the document you linked, there’s a link to a document on the AWS side that says what permissions to assign the user. Have you read it? docs.aws.amazon.com/IAM/latest/UserGuide/…. It’s in step 7, section “a”, sub-section “1.”. — Jesse P., Commented Oct 26, 2021 at 22:27

Mike Marseglia · Accepted Answer · 2021-11-09 13:30:39Z

For the Key option create an IAM User and attach policies to the user account.

For the IAM Role option create an IAM Role to be assumed by Cisco vManage and attach policies to the role.

Attach the following AWS Managed Policies to the IAM User or Role:

1 Answer 1