Add the Kion Service Role

If you're using AWS, you added a service role to your AWS management account as part of the AWS Quickstart process when you set up Kion. You may need to add it again for accounts in the future, depending on how you add your accounts.

The service role is implemented via an AWS CloudFormation template. It creates an AWS IAM role with a trust policy that allows Kion to access the account's data.

To add the Kion service role to your AWS management account:

1. In your AWS management account, navigate to the AWS CloudFormation service.
2. Click Create Stack.
3. Upload the AWS CloudFormation template. It can be downloaded within Kion on the page where you add an AWS account for non-management accounts, as shown in the screenshot below. See AWS Billing Sources for a template for your AWS management account. Scroll to the bottom of the article and download the attached file named billing-role-full-access.json.
4. Name the stack: cloudtamer-service-role.
5. Replace the AWS account with the AWS account number where Kion is installed.
6. Follow the remainder of the prompts.