API Security: On-board AWS

Pre-Requisite: In order to complete the onboard process, you will need to be able to modify your AWS account's IAM policy to create a role for Data Theorem.

Onboarding Data Theorem’s role into AWS

1. Sign in to the AWS Management Console by clicking here
   • The link will take you to create policy page
     
     
2. Select the JSON tab in the policy editor and paste the following policy (overwriting the existing items):

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Resource": "*",
      "Action": [
        "apigateway:GET"
      ]
    }
  ]
}

1. Select Review policy, and enter the name below:
   • DataTheorem-APIGateway-SecurityAudit
     
     
2. Select Create policy. Close the tab and navigate back to our portal and select Next
   
   
3. Navigate to Create Role page on AWS by clicking here

• The link will pre-fill Data Theorem's account ID and external ID
  
  
1. Ensure the field Account ID and External ID are pre-filled
   
   
2. Select Next: Permissions
   
   
3. Enter SecurityAudit in the search box and then select its checkbox
   
   
4. Erase the search box, and enter DataTheorem-APIGateway-SecurityAudit. Select its checkbox
   
   
5. Select Next: Review and enter the following for the name:
• DataTheorem-Service
• Ensure it has the two SecurityAudit and DataTheorem-APIGateway-SecurityAudit policies enabled
  
  
6. Select Create role
   
   
7. Select on the newly created role DataTheorem-Service
   
   
8. Copy the Role ARN value on the top of the page and send to support@datatheorem.com