Create the Saturn Installation Role

The role created by our cloud formation stack will create a trust relationship to our account. If you are running the installer yourself - you can modify the trust relationship to point to your account.

In AWS Console, navigate to the CloudFormation section. Click the “Create Stack” button. From the dropdown, choose the standard option (“With new resources”).

On the next screen, choose “Template is ready” option in the “Prepare template” section. For the template, use the following URL:

https://s3.us-east-2.amazonaws.com/saturn-cf-templates/iam-role.cft

Click Next.

On the next screen, give the stack a name of your choice (for example, “Saturn Cloud Access”). The external ID can be found on the installer page. Click “Next”

On the next screen, all fields are optional. Proceed to the next page when you have configured these items as desired.

Review all values on the next page - step back and making corrections if needed. When you’re ready to create the stack, check the checkbox next to “I acknowledge that AWS CloudFormation might create IAM resources with custom names.” Then, click on the “Create stack” button.

Once stack creation is complete, you need to provide the ARN for the created role to the installer in order to continue with the deployment. You may find this info on the “Outputs” tab in the AWS console. The ARN is the string that starts with “arn:aws:iam” in the “Value” column, as shown below.