Create Federated Roles in AWS

When you configure AWS roles in JumpCloud, you need to create federated roles in AWS and collect the provider Amazon Resource Name (ARN) and the role ARNs. 

To create federated role in AWS:

1. Log in to the Amazon Web Services console for your organization as an administrator.
2. In the main console, go to All Services.
3. Under Security, Identity & Compliance, select IAM.
4. In the left hand side-nav, select Roles.
5. Select Create role.
6. For Select type of trusted entity, select SAML 2.0 federation.
7. For SAML provider, select JumpCloud.
   
8. Select Allow programmatic and AWS Management Console access.
9. Select Next: Permissions.
10. Attach the desired permission policy for the role. 
11. Select Next: Review
12. Define a Role Name. 
13. Select Create role.

Collecting ARNs

To collect the provider ARN in AWS:

1. Log in to the Amazon Web Services console for your organization as an administrator.
2. In the main console, go to All Services.
3. Under Security, Identity & Compliance, select IAM.
4. Go to Providers, then select JumpCloud. 
5. Collect the Provider ARN.
   

To collect the role ARNs in AWS:

1. Log in to the Amazon Web Services console for your organization as an administrator.
2. In the main console, go to All Services.
3. Under Security, Identity & Compliance, select IAM.
4. Go to Roles. 
5. Open each role to collect the Role ARN.