1
In your AWS Console, go to IAM → Roles → Create role
2
Under Trusted entity type, choose AWS account → Another AWS account and enter Unicloud's Account ID:
3
On the permissions page, attach the AdministratorAccess managed policy (or a custom policy limited to services you intend to use).
4
Give the role a name — e.g. UnicloudProvisionerRole — then click Create role.
5
Open the newly created role, copy the Role ARN at the top, and paste it into the field below.
Trust policy (automatically applied in step 2)
{
"Version": "2012-10-17",
"Statement": [{
"Effect": "Allow",
"Principal": { "AWS": "arn:aws:iam:::root" },
"Action": "sts:AssumeRole"
}]
}