Create an IAM (Identity and Access Management) role for the policy described in Configuring an IAM policy for the PKIaaS Virtual Machine. 

Skip this step if the role was already created for a previous deployment.

To create an IAM role

  1. Type "IAM" in the search box.
  2. Select IAM in the search results to display the IAM dashboard.
  3. Select Access management> Roles in the navigation sidebar.
  4. Click Create role to display the Select trusted entity page.
  5. Under Trusted entity type, click Custom trust policy.

  6. Paste the following code under Custom trust policy. 

    {
    "Version": "2012-10-17",
    "Statement": [
    {
    "Effect": "Allow",
    "Principal": {
    "Service": "vmie.amazonaws.com"
    },
    "Action": "sts:AssumeRole",
    "Condition": {
    "StringEquals": {
    "sts:Externalid": "vmimport"
    }
    }
    }
    ]
    }
  7. Click Next.
  8. In the Add permissions page, select the policy described in Configuring an IAM policy for the PKIaaS Virtual Machine.
  9. Click Next to display the Role details page.
  10. In the Role name field, type vmimport. 
  11. Click Create role.