3-2. STS
-
In the AWS console, go to IAM > Roles and click Create role.
-
For Trusted entity type, select AWS account.
-
Under Add permissions, select the permissions to grant through STS. (This example grants read permissions for S3 and CloudWatch.)
-
Verify the permissions and trust relationships of the created role.
-
Check the ARN of the created STS role (e.g.,
arn:aws:iam::123456789012:role/logpresso_sts_role). This value is used when you configure the connection profile.



