AWS Documentation » AWS Ground Station » User Guide » Getting Started with AWS Ground Station » Setting Up AWS Ground Station

The AWS Documentation website is getting a new look!
Try it now and let us know what you think. Switch to the new look >>

You can return to the original look by selecting English in the language selector above.

Setting Up AWS Ground Station

Before you start using AWS Ground Station, you need to know what AWS Identity and Access Management (IAM) permissions you need, and what space vehicle credentials to provide.

Step 1: Sign Up for AWS

To use AWS Ground Station, you need an AWS account. If you already have an AWS account, skip to Step 2: Create an IAM User in Your AWS Account.

To sign up for an AWS account

1. Open https://aws.amazon.com/, and then choose Create an AWS Account.

   Note If you previously signed in to the AWS Management Console using AWS account root user credentials, choose Sign in to a different account. If you previously signed in to the console using IAM credentials, choose Sign-in using root account credentials. Then, choose Create a new AWS account.

2. Follow the instructions. Part of the sign-up procedure involves receiving a phone call and entering a verification code using the phone keypad.

Step 2: Create an IAM User in Your AWS Account

To use AWS Ground Station, you need to create an IAM user in your AWS account with specific permissions.

To create an IAM user in your AWS account

1. In Creating an IAM User in Your AWS Account, follow the instructions under Creating IAM Users (Console).

2. In the AWS Management Console, choose Users and in the User name list, choose the new user that you just created.

3. On the Permissions tab, choose Add permissions.

4. On the next page, choose Attach existing policies directly.

5. Find the Groundstation_general_access policy.

6. In the edit pane of the Permissions tab, edit the JSON with the following values:

   • For Console General Access, set Action to groundstation:* as follows:

     {
       "Version": "2012-10-17",
       "Statement": [
         {
           "Effect": "Allow",
           "Action": [
             "groundstation:*"
           ],
           "Resource": [
             "*"
           ]
         }
       ]
     }
     

   • For Read-only, set Action to groundstation:Get*, groundstation:List*, and groundstation:Describe* as follows:

     {
       "Version": "2012-10-17",
       "Statement": [
         {
           "Effect": "Allow",
           "Action": [
             "groundstation:Get*",
             "groundstation:List*",
             "groundstation:Describe*"
           ],
           "Resource": [
             "*"
           ]
         }
       ]
     }
     

   • For additional security through multifactor authentication, set Action to groundstation:*, and Condition/Bool to aws:MultiFactorAuthPresent:true as follows:

     {
         "Version": "2012-10-17",
         "Statement": [
             {
                 "Effect": "Allow",
                 "Action": "groundstation:*",
                 "Resource": "*",
                 "Condition": {
                     "Bool": {
                         "aws:MultiFactorAuthPresent": true
                     }
                 }
             }
         ]
     }
     

For more information about creating IAM users and attaching policies, see the IAM User Guide.

Step 3: Customer Onboarding

To complete registration for your AWS Ground Station account, see the AWS Ground Station webpage to provide onboarding details. The AWS Ground Station team will work with you to onboard your satellites to the service.