Cisco
Login
Search
Software Secure Firewall Threat Defense
Platform Secure Firewall Threat Defense Virtual
Activity Onboard

Access Control Cisco Secure Dynamic Attributes Connector Create a Connector Amazon Web Services Connector—About User Permissions and Imported Data Create an AWS User with Minimal Permissions for the Cisco Secure Dynamic Attributes Connector

Last updated: Jul 29, 2025

Create an AWS User with Minimal Permissions for the Cisco Secure Dynamic Attributes Connector

This task discusses how to set up a service account with minimum permissions to send dynamic attributes to Security Cloud Control. For a list of these attributes, see Amazon Web Services Connector—About User Permissions and Imported Data.

Before you begin

You must already have set up your Amazon Web Services (AWS) account. For more information about doing that, see this article in the AWS documentation.

Procedure

1

Log in to the AWS console as a user with the admin role.
2

From the Dashboard, click Security, Identity & Compliance > IAM.
3

Click Access Management > Users.
4

Click Add Users.
5

In the User Name field, enter a name to identify the user.
6

Click Access Key - Programmatic Access.
7

At the Set permissions page, click Next without granting the user access to anything; you'll do this later.
8

Add tags to the user if desired.
9

Click Create User.
10

Click Download .csv to download the user's key to your computer.


 

This is the only opportunity you have to retrieve the user's key.
11

Click Close.
12

At the Identity and Access Management (IAM) page in the left column, click Access Management > Policies.
13

Click Create Policy.
14

On the Create Policy page, click JSON.

Create a JSON policy

15

Enter the following policy in the field:

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Effect": "Allow",
			"Action": [
				"ec2:DescribeTags",
				"ec2:DescribeInstances",
				"ec2:DescribeVpcs"
			],
			"Resource": "*"
		}
	]
}

16

Click Next.
17

Click Review.
18

On the Review Policy page, enter the requested information and click Create Policy.
19

On the Policies page, enter all or part of the policy name in the search field and press Enter.
20

Click the policy you just created.
21

Click Actions > Attach.
22

If necessary, enter all or part of the user name in the search field and press Enter.
23

Click Attach Policy.

What to do next

Create an AWS Connector.

Previous topic Amazon Web Services Connector—About User Permissions and Imported Data Next topic Create an AWS Connector