You need an IAM role to delegate permissions to the AWS service to be used by your Job. If this IAM role does not exist, define it on AWS.
Before you begin
- You have the appropriate rights and permissions to create a new role on AWS.
- Log in to your account on AWS and navigate to the AWS console.
- Select IAM.
- In the navigation pane of the IAM console, select Roles, and then select Create role.
- Select AWS service and in the Choose the service that will use this role section, select the AWS service to be run with your Job. For example, select Redshift.
Select the use case to be used for this service. An use case in terms of AWS is defined by the service to include the trust policy that this service requires. Depending on the service and the use case that you selected, the available options vary. For example, with Redshift, you can choose an use case from:
- Redshift (with a pre-defined Amazon Redshift Service Linked Role Policy);
- Redshift - Customizable. In this use case, you are prompted to select either read-only policies or full-access policies.
- In the Role name field, enter the name to be used for the role being created.
- Select Create role.
A custom role has been created to delegate permissions to an AWS service. For the full documentation about creating a role on AWS, see Role creation from the AWS documentation.