Creating a Vmimport Role

Before you perform any VM conversion operations to create AWS instances, you must enable the VM Import Service role (vmimport) on the Amazon Web Services account.

Before You Begin

For links to the JSON files for various AWS data types and use cases, see Amazon Web Services User Permissions for Backups and Restores.

Procedure

1. To create the service role, create a file named trust-policy.json.

2. Save the file anywhere on your computer and note the location of the file.

3. From the AWS command line, use the create-role command to create a role named vmimport and to give VM import and VM export operations access to the role. Specify the full path to the location of the trust-policy.json file, and add file:// before the path (for example, file://C:\trust-policy.json as shown in the following command):

   aws iam create-role --role-name vmimport --assume-role-policy-document file://C:\trust-policy.json

   Note

   Provide the access key and secret key for the account where the vmimport role is created. Ensure that the user has permission to create the role.

   If you receive an error stating that "This policy contains invalid Json," verify that the path to the JSON file is provided correctly.

4. Create a file named role-policy.json.

5. From the AWS command line, use the put-role-policy command to attach the policy to the vmimport role. Specify the full path to the location of the role-policy.json file.

   aws iam put-role-policy --role-name vmimport --policy-name vmimport --policy-document file://C:\role-policy.json

   Note

   Provide the access key and secret key for the account where the vmimport role is created. Ensure that the user has permission to create the role.