Connection with AWS Gateways

See how to:

Obtain access credentials.
Create a new connection with AWS gateway.
Import APIs.

Access Credentials

To create a connection for the AWS API Gateway, you must enter your AWS credentials on the Connections screen.

These credentials are obtained from AWS.

Access the AWS Management Console and follow the steps below to:

Create a user.
Add an access policy.
Create credentials.

Consult the AWS documentation for more details.

Creating a User

There are several ways to create an IAM user in your AWS account.

Follow the steps below to create a user through the AWS Management Console:

At the top of the AWS Management Console, in the search bar, search for and select IAM.
In the left menu, under Access management, select Users.
Click the Create user button in the top-right corner of the screen.
In the User name field, enter the value: adaptive_governance_integration_aws and click Next.
Under Permissions options, select Attach policies directly and click Next.

Under Permissions policies, DO NOT select Policy name.
Under Review and Create, review the information and click Create user.

Adding an Access Policy

In the user list, select adaptive_governance_integration_aws
In the Permissions tab, under Permissions policies, click the Add Permissions button, and then click Create inline policy.
In the Policy editor, select the JSON tab.

Copy and paste the code below into the editor.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "apigateway:GET"
            ],
            "Resource": [
                "*"
            ]
        }
    ]
}

or

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "apigateway:GET"
            ],
            "Resource": [
                "arn:aws:apigateway:*::/restapis",
                "arn:aws:apigateway:*::/restapis/*",
                "arn:aws:apigateway:*::/restapis/*/stages",
                "arn:aws:apigateway:*::/restapis/*/deployments",
                "arn:aws:apigateway:*::/restapis/*/deployments/*",
                "arn:aws:apigateway:*::/apikeys",
                "arn:aws:apigateway:*::/usageplans"
            ]
        }
    ]
}

[IMPORTANT] Depending on your business needs, there are some policy templates that can be used.

Click Next.
In the Policy name field, enter the value adaptive_governance-aws and click Create policy.

Creating the Credentials

In the user list, select adaptive_governance_integration_aws and click the Security credentials tab.
Scroll down to Access keys and click Create access key.
Select the option Application running on an AWS compute service.

Check the confirmation box at the bottom of the page.
Click Next.
You will see your access key and secret access key.
Make a note of these credentials to use when registering the AWS connection in Adaptive Governance.
Click Done.

Creating a New Connection

Follow the steps below to create a new connection.

Access the Connections screen by clicking the left-side menu or the card on the home screen.
Click the + CREATE CONNECTION button located at the top-right of the screen.
Select the connection provider and click CREATE CONNECTION.
Select the connection mode: whether it is native (data updated directly with the provider) or not (manual upload).

Non-native connection:

Define a name for the connection and click NEXT.
Confirm the information and click SAVE.

Native connection:

Define a name for the connection and click NEXT.
Select a connection mode: Access Key or IAM (Role ).
- For Access Key, provide:
  - AWS Access Key Id: the key for your AWS resource.
  - AWS Secret Access Key Id: the AWS key secret.
  - Review the information and click SAVE.
- For IAM:
  - Configure your role: copy the example code shown in this section and use it in your AWS provider to create a role:
    
    Steps in the AWS Console:
    
    Go to IAM > Roles and click the "Create role" button.
    
    Select "Custom trust policy" and paste the copied code.
    
    Add the policy generated in the Adding an access policy step.
    
    Complete the role creation, adding the necessary information, such as tags.
    
    After creating the role, copy the Role ARN generated by AWS.
  - Role ARN: paste the generated Role ARN here.
  - Review the information and click SAVE.

Importing APIs

To import APIs, follow the steps below:

Access the Connections screen by clicking the left-side menu or the card on the home screen.
Find the connection you want to edit and click the icon .
If necessary, use the search bar to locate the desired connection.
In the API Imports screen, click the + IMPORT API button located just below General Info and above API Imports.
Select the region of the APIs you want to import.
Select the APIs you want to import and click SAVE.

Whenever an API is updated, click refresh icon .
detail with the refresh imported APIs button

Thanks for your feedback!

EDIT

Share your suggestions with us!
Click here and then [+ Submit idea]