change file name

2022-11-23 11:15:59 +02:00
parent 467d99ace4
commit 1ed399566b
1 changed files with 0 additions and 0 deletions
@@ -0,0 +1,94 @@
+Zerto In-Cloud overcomes the AWS 20 concurrent snapshot copy limits between source and target regions by allowing you to use multiple AWS Accounts as Scale Accounts. Scale Accounts effectively multiply the number of concurrent snapshots that can be replicated for much lower RPOs.
+
+Use these steps to configure a Zerto In-Cloud IAM Policy and assign roles for ZIC Scale Accounts.
+
+1.  Log into the scale account.
+2.  Navigate to **IAM - Policies**.
+3.  Create a Policy.
+4.  Create Roles.
+
+#### Create a Policy
+
+-	Navigate to the JSON tab, copy and paste the following:
+```{
+	"Version": "2012-10-17",
+	"Statement": [
+	{
+		"Sid": 
+		"VisualEditor0",
+		"Effect": "Allow",
+		"Action": [
+		"ec2:CopySnapshot",
+		"ec2:DeleteSnapshot",
+		"ec2:CreateSnapshots",
+		"ec2:ModifySnapshotAttribute",
+		"ec2:DescribeInstanceTypeOfferings",
+		"ec2:CreateVolume",
+		"ec2:AttachVolume",
+		"ec2:DetachVolume",
+		"ec2:ModifyVolume",
+		"ec2:DeleteVolume",
+		"ec2:CreateTags",
+		"ec2:RunInstances",
+		"ec2:DescribeImages",
+		"ec2:DescribeSnapshots",
+		"ec2:DescribeRegions",
+		"ec2:DescribeInstances",
+		"ec2:DescribeAvailabilityZones",
+		"ec2:DescribeVpcs",
+		"ec2:DescribeSecurityGroups",
+		"ec2:DescribeNetworkInterfaces",
+		"ec2:DescribeSubnets",
+		"ec2:DescribeVolumes",
+		"ec2:DescribeVolumeStatus",
+		"ec2:DescribeInstanceAttribute",
+		"ec2:DescribeInstances",
+		"ec2:DescribeTags",
+		"ec2:ModifyInstanceAttribute",
+		"ec2:RunInstances",
+		"ec2:ModifyInstanceAttribute",
+		"ec2:ModifyNetworkInterfaceAttribute",
+		"ec2:StartInstances",
+		"ec2:TerminateInstances",
+		"ec2:CreateTags",
+		"ec2:DeleteTags",
+		"ec2:StopInstances",
+		"dynamodb:DescribeTable",
+		"dynamodb:CreateTable",
+		"dynamodb:PutItem",
+		"dynamodb:Scan",
+		"dynamodb:GetItem",
+		"dynamodb:DeleteItem",
+		"dynamodb:Query",
+		"dynamodb:BatchGetItem",
+		"dynamodb:DeleteTable",
+		"dynamodb:ListTables",
+		"sts:AssumeRole",
+		"iam:passRole",
+		"kms:CreateGrant",
+		"kms:Decrypt",
+		"kms:DescribeKey",
+		"kms:GenerateDataKeyWithoutPlainText",
+		],
+	"Resource": "*"
+	}
+  ]
+}
+```
+-	Name the policy **ZicScaleAccountPolicy** and **Save**.
+
+#### Create Roles
+
+1.  Go to **Roles**.
+2.  Create role - **Another AWS account**.
+3.  In **Account ID** insert the Deployment account. Click **Next**.
+
+	![Create_role](Images/ZIC_create_Role.png?raw=true)
+
+-	Select the policy you created. Click **Next**.
+
+	![Create_Policy](Images/ZIC_create_Policy.png?raw=true)
+
+-	Name the Role **ZicScaleAccountRole**.
+
+	![ZicScaleAccountRole](Images/ZIC_ZicScaleAccountRole.png?raw=true)