Add AWS Account to the Valtix Controller

Once you prepared the AWS account as described in the previous sections, you can link that Cloud account to the Valtix Controller.

Add Cloud account

1. Login to the Valtix Dashboard using the credentials provided by Valtix
2. Once logged in, you will see different tabs at the top header. Click Manage tab
3. On the left panel, you'll see many functional links. Click Cloud Accounts -> Accounts
4. Click Add Account. This will walk you through steps on how to link AWS Account to Valtix Controller.

   Select the account platform. Upon selecting account type, new fields will appear base on the account type selected.
   
   Parameter | Description
   ----------|------------
   **Account Type** | Cloud platform: AWS, Azure, GCP
   **AWS Account Name** | Name of your AWS Account that will be used as a reference in Valtix Controller. Controller can manage multiple accounts.
   **AWS Account Number** | This value can be found in AWS management console or when in the outputs of the CFT stack created initially.
   **AWS IAM Role (ARN)** | This is IAM role created for Valtix Controller. CFT output will have this value. From the CFT, it is the output value of `ValtixControllerRoleArn` The ARN would look something like this: arn:aws:iam::{accountid}:role/valtixcontrollerrole
   **External ID** | This value is a random value that is used to provide trust relation on IAM role. This value needs to match the value that you provided in Valtix Controller role IAM role created. In CFT, the default was `123456789, but it is recommended to update this change instead of using the default 123456789. This fill is pre-populated with a random string which you can use to update IAM role External ID. To update the External ID on AWS IAM role, please see section: **Edit IAM role on AWS console**.
   

Note

Valtix Controller takes a few seconds to read the external ID. If external ID was updated on AWS IAM role, you may receive an error upon clicking Save. Please retry and click on Save after a few seconds.

Edit the IAM role on AWS Console

1. On AWS console edit the IAM Role valtixcontrollerrole (Default name created by CF unless you override with a different prefix)
2. Under Trust relationships tab, click Edit trust relationship
3. Replace 123456789 with the External ID shown on the Valtix Dashboard UI and save
4. Wait approximately 10 seconds before continuing on the Valtix Dashboard
5. Click Finish