SnapShooter logo SnapShooter

Setting up AWS Account Setup


Details

To be able to take backups of your AWS Instances and AWS EBS volumes we need to gain access to your account, AWS has some of the most powerful access control permissions in the cloud market. This enables you to grant SnapShooter only the access we require to take daily to hourly backups of your AWS servers.

Getting IAM Setup (Quick)

  • Create Policy https://console.aws.amazon.com/iam/home?region=eu-west-2#/policies
  • Json
  • Replace with the following
  • { "Version": "2012-10-17", "Statement": [ { "Sid": "snapshooter", "Effect": "Allow", "Action": [ "ec2:DescribeImages", "ec2:DeregisterImage", "ec2:DescribeInstances", "ec2:DeleteSnapshot", "ec2:CreateTags", "ec2:DescribeVolumes", "ec2:CreateSnapshot", "ec2:CreateImage", "ec2:DescribeSnapshots" ], "Resource": [ "*" ] } ] }
  • Review Policy
  • Name it e.g. snapshooter_policy
  • Create Policy

User

Getting Setup Long Guide

This is a longer and more in-depth version to our setup with photos to help guide you through the setup.

Step One - Create Policy

  • Go to https://console.aws.amazon.com/iam/home?region=eu-west-2#/policies and click create policy.
  • On the policy creator click json and past in the following
  • {
    "Version": "2012-10-17",
    "Statement": [
    {
      "Sid": "snapshooter",
      "Effect": "Allow",
      "Action": [
        "ec2:DescribeImages",
        "ec2:DeregisterImage",
        "ec2:DescribeInstances",
        "ec2:DeleteSnapshot",
        "ec2:CreateTags",
        "ec2:DescribeVolumes",
        "ec2:CreateSnapshot",
        "ec2:CreateImage",
        "ec2:DescribeSnapshots"
      ],
      "Resource": [
        "*"
      ]
    }
    ]
    }
  • https://i.imgur.com/omMAZ4W.png
  • Press Review Policy
  • Give your policy a easy to remember name e.g. 'snapshooter_policy'
  • https://i.imgur.com/8rOrmTD.png
  • Create Policy

Step Two - Create User

  • Go to IAM here https://console.aws.amazon.com/iam/home?region=eu-west-1#/users
  • Click Create User
  • give the user a name e.g. snapshooter
  • click Next permissions
  • https://i.imgur.com/QZgzpPy.png
  • Click Attach existing polices directly
  • https://i.imgur.com/RKNoxhv.png
  • Search for policy name i.e. snapshooter_policy
  • https://i.imgur.com/bEi3sLT.png
  • Tick Snapshooter policy
  • Click Next tags https://i.imgur.com/A5LTDRq.png
  • Add any tags you want
  • Click Create user
  • Copy credential
  • https://i.imgur.com/TuTBVfE.png
  • Go to SnapShooter Add AWS https://snapshooter.io/dashboard/settings/aws/add
  • https://i.imgur.com/SHp6XlL.png
  • Select the regions you want (you can select more than one) and paste in your credentials
  • You can change the name of the account so make it something helpful if you plan to have more than one account