The AWS STS AssumeRole authentication method allows the Commvault software to assume an IAM role in order to access to your AWS account and perform data protection operations.
Procedure
-
From the Command Center navigation pane, go to Manage > Security.
The Security page appears.
-
Click Credential vault.
The Manage credentials page appears.
-
In the upper-right area of the page, click Add.
The Add credential dialog box appears.
-
For Account type, select Cloud account.
-
For Vendor type, select Amazon Web Services.
-
For Authentication type, select STS Assume Role with IAM Policy.
-
For Credential name, enter a name for these credentials.
-
For Role ARN, enter the ARN of the specified IAM role.
-
For External ID, enter the external ID that is specified in the trust policy of your AWS account.
If your trust policy specifies an external ID, then you must enter the external ID to allow the Commvault software to assume the specified IAM role. (If your trust policy doesn't specify an external ID, then leave External ID blank.)
For more information, see Using an External ID with the AWS STS AssumeRole Authentication Method.
-
For Description, enter a description for these credentials.
-
Click Save.