Redis Cloud automatically manages your cluster and provisions instances when needed. In order for Redis Cloud to be able to manage AWS resources, you must have an AWS account that is separate from your AWS application account and a user on that separate AWS account.

Within that new AWS account, you need to create an instance role and a user with a specific policy. The user requires both UI console access and an Access Key so that Redis Cloud can programmatically create and manage AWS resources on your behalf. After you create the user, generate an Access Key for the user and save the key in a secure location. These keys are required when you create an Redis Cloud account.

Warning -

We use the provided credentials to configure your AWS environment and provision required resources.

We cannot operate or manage your database if you do these actions:

  • Manually change the configurations of provisioned resources, such as security groups
  • Manually stop or terminate provisioned instances

For more about creating an AWS user, see the AWS documentation.

Step 1: Create the IAM Instance Policy

First, create a policy to use for the new instance role:

  1. In the AWS IAM console, go to Policies > Create policy. create_policy-1

  2. In the JSON tab, paste the contents of the RedisLabsInstanceRolePolicy.json policy file.

    View RedisLabsInstanceRolePolicy.json

  3. Validate it and press Review Policy.

  4. Enter RedisLabsInstanceRolePolicy as the policy name and click Create Policy. review_role_policy

Step 2: Create the Role

Now create the role that uses the policy:

  1. In AWS IAM console, go to Roles and click Create Role. create_role
  2. Select AWS Service as the trusted entity, EC2 as the service and use case, and click Next: Permissions. select_service
  3. Enter RedisLabsInstanceRolePolicy in the search box to lookup the policy we just created, select it, and click Next: Review. attach_policies
  4. Name the role redislabs-cluster-node-role and click Create Role.

Step 3: Create the User Policy

Now create a policy to assign to the user:

  1. In AWS IAM console, go to Policies > Create policy.

  2. In the JSON tab, paste the contents of the redislabsIAMUserRestrictedPolicy.json policy file.

    View RedislabsIAMUserRestrictedPolicy.json

  3. Validate the policy and click Review Policy.

  4. Enter RedislabsIAMUserRestrictedPolicy as the policy name and click Create Policy. review_user_policy

Step 4: Create the User

Last, create a user and attach the policy you created:

  1. In AWS IAM console, go to Users > select Add user. add_user
  2. Name it redislabs-user and select both Programmatic access and AWS Management Console access. select_access_type
  3. Set a password or auto-generate one, and click Next: Permissions.
  4. Select Attach existing policies directly and select RedislabsIAMUserRestrictedPolicy from the list. set_permissions
  5. Click Next: Review.
  6. Click Create user.
  7. Download the user credentials and store them in a secure location.