When Data Collector runs on an Amazon EC2 instance, you can use the AWS Management Console to configure an IAM role for the EC2 instance. Data Collector uses the IAM instance profile credentials to automatically connect to AWS.

Creating AMI role:

1. Go to Amazon EC2 and launch the cluster.
2. Once the EC2 instance is launched you can right click on your instance and go to instance setting -

-> attach/replace IAM Role:

3. Create a new IAM role and select it:

4. Select the type of trusted entity depending on your organisation:

5. Select the EC2 option and use case depending on your requirement:

6. Attach the permission policy:

7. Name the role :

8. Attach the IAM role you created:

9. In your instance, you would be able to see the AMI role you selected:

10. Once you are done configuring the IAM role, then ssh into your local machine and download SDC for the specific version which is required by you to use. Once SDC is up, create a pipeline with S3 origin/destination and keep the credential (Access key ID & Secret Access key) field empty.

NOTE: When Data Collector does not run on an Amazon EC2 instance or when the EC2 instance doesn’t have an IAM role, you must specify the Access Key ID and Secret Access Key properties in the origin.