Setting up AWS TNB
Set up AWS TNB by completing the tasks described in this topic.
Tasks
Sign up for AWS
When you sign up for Amazon Web Services, your AWS account is automatically signed up for all services in AWS, including AWS TNB. You are charged only for the services that you use.
If you have an AWS account already, skip to the next task. If you don't have an AWS account, use the following procedure to create one.
To create an AWS account
Follow the online instructions.
Part of the sign-up procedure involves receiving a phone call and entering a verification code on the phone keypad.
When you sign up for an AWS account, an AWS account root user is created. The root user has access to all AWS services and resources in the account. As a security best practice, assign administrative access to a user, and use only the root user to perform tasks that require root user access.
Choose an AWS Region
To view the list of available Regions for AWS TNB, see the AWS Regional Services
List
Note the service endpoint
To connect programmatically to an AWS service, you use an endpoint. In addition to the standard AWS endpoints, some AWS services offer FIPS endpoints in selected Regions. For more information, see AWS service endpoints.
| Region Name | Region | Endpoint | Protocol |
|---|---|---|---|
| US East (N. Virginia) | us-east-1 | tnb.us-east-1.amazonaws.com | HTTPS |
| US West (Oregon) | us-west-2 | tnb.us-west-2.amazonaws.com | HTTPS |
| Asia Pacific (Seoul) | ap-northeast-2 | tnb.ap-northeast-2.amazonaws.com | HTTPS |
| Asia Pacific (Sydney) | ap-southeast-2 | tnb.ap-southeast-2.amazonaws.com | HTTPS |
| Canada (Central) | ca-central-1 | tnb.ca-central-1.amazonaws.com | HTTPS |
| Europe (Frankfurt) | eu-central-1 | tnb.eu-central-1.amazonaws.com | HTTPS |
| Europe (Paris) | eu-west-3 | tnb.eu-west-3.amazonaws.com | HTTPS |
| Europe (Spain) | eu-south-2 | tnb.eu-south-2.amazonaws.com | HTTPS |
| Europe (Stockholm) | eu-north-1 | tnb.eu-north-1.amazonaws.com | HTTPS |
| South America (São Paulo) | sa-east-1 | tnb.sa-east-1.amazonaws.com | HTTPS |
(Optional) Install the AWS CLI
The AWS Command Line Interface (AWS CLI) provides commands for a broad set of AWS products, and is supported on Windows, macOS, and Linux. You can access AWS TNB using the AWS CLI. To get started, see the AWS Command Line Interface User Guide. For more information about the commands for AWS TNB, see tnb in the AWS CLI Command Reference.
Create an IAM user
AWS Identity and Access Management (IAM) is a web service that helps you securely control access to AWS resources. Create an IAM user role to use short-term credentials to access AWS.
To create the role, follow the instructions in Getting started in the AWS IAM Identity Center User Guide.
You can also configure programmatic access by Configuring the AWS CLI to use AWS IAM Identity Center in the AWS Command Line Interface User Guide.
Set up AWS TNB roles
You must create a IAM service role to manage different parts of your AWS TNB solution. AWS TNB service roles can make API calls to other AWS services, such as AWS CloudFormation, AWS CodeBuild, and various compute and storage services, on your behalf, to instantiate and manage resources for your deployment.
For more information about the AWS TNB service role, see Identity and access management for AWS TNB.
