2.2.3. How to create AWS policies and IAM user with access keys

Set Up IAM using AWS Console and App Studio

Step 1. Create AWS account. Skip to step 2 if you already have one.

1. Open https://aws.amazon.com/

2. Hit Create an Account

3. Specify:

• Email

• Password

• AWS account name (Make the name informative, for example add company name)

4. Fill in contact information:

• Select account type: Personal or Business

• Fill in data

5. Fill in payment information

Hit Verify and Continue

6. Phone confirmation

• Specify phone number

• Choose verification method

• Enter verification code to proceed

7. Choose your plan

• Basic support plan (Free) will be fine for private self authorized app.

8. Hit Complete sign up

Step 2. Configure IAM Policy

1. Log in your AWS Console Root user.

Once the account is verified and created log in to your AWS Management Console.

Make sure to sign in as Root user if you have few users, it is required to create IAM account.

2. Create Access policy:

2.1. Use Search to find IAM to manage access to AWS resources and proceed to IAM section

2.2. Go to Policies Under the Access Management menu

2.3. Hit Create policy 

2.4. Create a new policy (self)

Policy editor → JSON

Copy the code below:

The code should look like this:

2.5. Specify Details (Policy name is required):

Hit Create policy

Step 3. Create IAM user / account

Once the policy is created, we can create a new IAM USER

3.1. Go to the IAM section again

If you are not there any more, find IAM in the search field again and proceed to IAM section

3.2. Go to Users under the Access management

3.3. Hit Create user

3.4. Specify User name
You can use Store Manager or eMagicOne as a user name to identify that this user will be used to connect Amazon addon with Amazon Seller central.

3.5. On the next step select: “Attach policies directly”

3.6. Find the policy name that you have just created on the step 2.5 above

3.7. Enable the checkbox next to this policy

3.8. Hit Next - Create user

All done. The user is created

Step 4. Create Access key

4.1. Go to IAM → Users 

If you are not there any more, find IAM in the search field again and proceed to IAM section

4.2. Go to Users under the Access management

4.3. Open the user that we have just created

4.4. Go to Security credentials tab

 4.5. Scroll down to ACCESS KEY section

4.6. Hit Create access key button

4.7. Select Application running outside AWS and hit next

4.8. Specify description of the application. It is a good idea to specify the Store Manager / eMagicOne application here.

4.9. Hit Create access key

IMPORTANT! Save the AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY on this step. 

Those are shown ONE TIME ONLY and you will not be able to recover them once you exit this screen.

You can save them into the .csv file or copy to your password manager if you use any.

Hit Done to complete the process.

Important! Do not Hit Done UNLESS you save your Access key and Secret Access key!

4.10. Specify  Access key and Secret in Store Manger application

Important! It is a good idea to save the above credentials in other secure place, rather than only in Store Manager. You will not be able to recover those credentials if you loose them for any reason. 

The best practice is to use the above credentials in the password manager if you use any.

Now you are all set. You should select your Marketplace and configuration name to proceed.

Now you can proceed and crate your first feed. See instructions here >>

If you have any questions, feel free to contact us and we'll guide you further.