AWS setup

There is inevitably some manual set-up required for an AWS account.

If you intend to use AWS, create a new account in the usual way. See the AWS documentation for guidance.

Create an IAM user for the controller

Once that is done, login with your account credentials (the 'root' credentials) and in the Search bar at the top type 'IAM'. The first search item should be AWS IAM, click on it to go there. This will take you to the IAM Dashboard. Then:

1. Click Users on the left-hand menu
2. Click the Create user button in the top right corner
3. Write 'controller' in the User name box and click the Next button
4. Select Attach policies directly on the right and in the search box type 'Admin'
5. The filtered list should show a policy called AdministratorAccess, check this one and click the Next button
6. Check the summary and click Create user

Now your IAM user exists and has full administrator privileges. Next we need to create credentials so we can use this user from our Ansible controller server later. In the user list click on your new 'controller' user, then:

1. Click the Security credentials tab
2. Scroll down to Access keys and click the Create access key button on the right
3. Select Command Line Interface (CLI), ignore the alternatives dialogue, check the confirmation box and click Next
4. Enter a sensible description such as 'Ansible controller user' and click Create access key
5. Copy down the access key and secret key in a safe place, you will never see the secret key again (there is a download option)