Connect Your Cloud Account

GRAX can be installed automatically in your own cloud accounts in a matter of minutes. Here are the steps and permissions required.

AWS

GRAX can connect to your AWS account one of two ways:

GRAX requires a standalone AWS account. You can create one in 2 minutes through AWS Organizations or through the AWS home page.

You can set up the role in two clicks with the AWS Quick Create Wizard. Click through the wizard, then find the ARN on the Outputs tab.

To create it manually:

Click on Roles -> Create Role
Under trusted entity type select AWS Account
Under An AWS account ID, select Another AWS account and enter 999875163122. This account is managed by GRAX, Inc.
Select Require external ID
Enter the External ID provided by GRAX
- It is a random token like va/C3SU15+k/bm/N5aLiC+z40MdT8jS+HafSQdd5uzI=
Click Next
For Permissions Policies select AdministratorAccess
Click Next
Enter the name GRAX for the role, and click Create Role
Click on the Role you just created
Edit and set Maximum session duration to 4 hours
Finally share the Role ARN with GRAX

We created the cross account role.

ARN: arn:aws:iam::468434328104:role/GRAX

When you've shared those details, GRAX can assume the role and install your backends.

Click on Users -> Add User
For User name enter GRAX
Select Enable console access
- Leave the defaults to auto-generate a password that must be reset upon sign-in
Under Set Permissions select Attach policies directly and AdministratorAccess
Under Review and create select Create user
Stay on Retrieve password - GRAX needs the URL, username, and password you just created

We created the console user.

URL: https://468434328104.signin.aws.amazon.com/console
User Name: GRAX
Console Password: oHcZEXAMPLE

When you've shared those details, GRAX can log into the account and install your backends.