AWS Import/Export uses AWS Identity and Access Management (IAM) to control which users in your AWS account can create, modify, view, or cancel AWS Import/Export jobs. We strongly recommend that you create IAM users and use the credentials for those IAM users to create and manage AWS Import/Export jobs. For more information, see Controlling Access to AWS Import/Export Jobs.
The IAM user that creates an AWS Import/Export job must also have read and write access to the Amazon S3 bucket associated with the job and, for import to Amazon Glacier, the Amazon Glacier vault. That user must have access to the necessary resources until the AWS Import/Export job is completed. For listings of the specific permissions required, see Granting Access to Related AWS Resources.
In this step, you will add your AWS IAM user credentials to the
AWSCredentials.properties file that the AWS Import/Export Web
Service Tool provides for you. The following procedure takes you through the necessary
To save your access credentials to a file
Locate your IAM access credentials. If you do not have IAM access credentials, you will need to create them or have someone who has permission to administer IAM create them for you. For more information, go to Administering Access Keys for IAM Users.
When you create an access key, it's the only opportunity you have to view and save the secret access key for that user. Make sure you download the access key and save it in a secure location. You will not be able to view the secret access key using the AWS Management Console again later; if it becomes unavailable, you will have to create a new access key.
Go to the directory where you installed the AWS Import/Export Web Service tool.
AWSCredentials.properties file from this
directory using any text editor.
Update the file by providing your
secretKey. The following is an example of a
# Fill in your AWS Access Key ID and Secret Access Key # http://aws.amazon.com/security-credentials accessKeyId:
<Your Access Key ID>secretKey:
<Your Secret Key>
Save the file.
To protect your credentials, be sure to save the file to a secure location. This Getting Started assumes that you saved your credentials in the same directory as the Import/Export Web Service Tool, so that directory should be in a secure location. If your credentials file is in a different location, you can modify your command line to reference that location.
Now, you are ready to create a sample import or export job.