Step 2 A: Create IAM role in AWS

Log into your AWS console and create an IAM role. 

Creating an IAM role

Reference information

Enter the Principal ARN that you retrieved in Step 1 in the Account ID field. 

Use the Role Naming Format to name the role. See Step 1.

Assign ReadOnlyAccess (AWS managed policy) permissions or create a custom policy with specific Describe*/List* actions.

  Next: Single account access. Go to Step 5 Add credentials to Oomnitza