Create IAM Protection Role

Overview

In this following step, we have create an IAM role base on the prervious policy for further use to specify Permission in GuardDuty

  1. In the IAM interface, select Role from the left navigation bar and Create Role IAM Role
  2. In the Select trusted entity, select Custom Trust Policy IAM Role
  3. Select the following policy pl-gd-s3-raw IAM Role
  4. Next, select Role name in the Role details section.

  5. In the Trust Policy, paste the previous Trust Relationship in 3.1 section

    {
"Version": "2012-10-17",
"Statement": [
{
  "Effect": "Allow",
  "Principal": {
    "Service": "malware-protection-plan.guardduty.amazonaws.com"
  },
  "Action": "sts:AssumeRole"
}
]
}

    IAM Role

  6. Review the Role and Create new Role: IAM Role

  7. Complete create role IAM Role