Applies to:
...
...
Kyvos Enterprise
...
Kyvos Cloud (
...
SaaS on AWS)
...
Kyvos AWS Marketplace
Kyvos Azure Marketplace
...
Kyvos AWS Marketplace Kyvos Kyvos GCP Marketplace Kyvos Single Node Installation (Kyvos SNI) Kyvos Free (Limited offering for AWS)
...
Panel | ||||||
---|---|---|---|---|---|---|
| ||||||
Note This is applicable only for the Disaster Recovery (DR) deployment scenario for Kyvos Cloud 2023.2.x |
...
Step 1: Access the AWS Management Console:
Open the AWS Management Console using your AWS account credentials.Step 2: Navigate to the IAM Service:
Within the AWS Management Console, navigate to the IAM (Identity and Access Management) service.Step 3: Locate the Kyvos Role:
In the IAM service, locate the IAM role with the name "InstanceIamRole-StackName-CustomerAWSAccountId" associated with Kyvos.Step 4: Edit the Kyvos Role:
Select the Kyvos IAM role from the list to access its details.Step 5: Modify the Kyvos Policy:
Within the Kyvos role, find the "kyvos-policy" and click on it to edit the policy.Step 6: Locate the "Ec2StartStopKyvos" Statement:
Scroll through the policy document and locate the statement with the "Sid": "Ec2StartStopKyvos".Step 7: Update the Condition:
Within the "Ec2StartStopKyvos" statement, modify the "Condition" section as follows:
Replace the existing condition related to the stack name with the desired DR stack name.
Example:Code Block "Condition": { "StringEqualsIgnoreCase": { "ec2:ResourceTag/aws:cloudformation:stack-name": "CustomerStack-DR" } }
By updating the condition with the desired DR stack name, the Kyvos role will grant start/stop actions only to the instances associated with the specific DR deployment, as intended.
Step 8: Save the Policy:
After making the necessary changes, save the updated policy.Step 9: Apply the Modified Role:
Once the policy is saved, the modified Kyvos role will automatically take effect. Now this role will have the permissions to start/stop/describe EC2 instances of DR deployment.