Creating a Connector in AWS from Cloud Manager
An Account Admin needs to deploy a Connector before you can use most Cloud Manager features. Learn when a Connector is required. The Connector enables Cloud Manager to manage resources and processes within your public cloud environment.
This page describes how to create a Connector in AWS directly from Cloud Manager. You also have the option to create the Connector from the AWS Marketplace, or to download the software and install it on your own host.
These steps must be completed by a user who has the Account Admin role. A Workspace Admin can't create a Connector.
When you create your first Cloud Volumes ONTAP working environment, Cloud Manager will prompt you to create a Connector if you don't have one yet. |
Setting up AWS permissions to create a Connector
Before you can deploy a Connector from Cloud Manager, you need to ensure that your AWS account has the correct permissions.
-
Download the Connector IAM policy from the following location:
-
From the AWS IAM console, create your own policy by copying and pasting the text from the Connector IAM policy.
-
Attach the policy that you created in the previous step to the IAM user who will create the Connector from Cloud Manager.
The AWS user now has the permissions required to create the Connector from Cloud Manager. You'll need to specify AWS access keys for this user when you're prompted by Cloud Manager.
Creating a Connector in AWS
Cloud Manager enables you to create a Connector in AWS directly from its user interface.
-
An AWS access key and secret key for an IAM user who has the required permissions.
-
A VPC, subnet, and keypair in your AWS region of choice.
-
If you're creating your first Working Environment, click Add Working Environment and follow the prompts. Otherwise, click the Connector drop-down and select Add Connector.
-
Click Let's Start.
-
Choose Amazon Web Services as your cloud provider.
Remember that the Connector must have a network connection to the type of working environment that you're creating and the services that you're planning to enable.
-
Review what you'll need and click Continue.
-
Provide the required information:
-
AWS Credentials: Enter a name for the instance and specify the AWS access key and secret key that meet permissions requirements.
-
Location: Specify an AWS region, VPC, and subnet for the instance.
-
Network: Select the key pair to use with the instance, whether to enable a public IP address, and optionally specify a proxy configuration.
-
Security Group: Choose whether to create a new security group or whether to select an existing security group that allows inbound HTTP, HTTPS, and SSH access.
There's no incoming traffic to the Connector, unless you initiate it. HTTP and HTTPS provide access to the local UI, which you'll use in rare circumstances. SSH is only needed if you need to connect to the host for troubleshooting.
-
-
Click Create.
The instance should be ready in about 7 minutes. You should stay on the page until the process is complete.
You need to associate a Connector with workspaces so Workspace Admins can use those Connectors to create Cloud Volumes ONTAP systems. If you only have Account Admins, then associating the Connector with workspaces isn’t required. Account Admins have the ability to access all workspaces in Cloud Manager by default. Learn more.