Setup AWS credential for scanning

• You need create a user with SecurityAudit policy

1. Log into your AWS account as an admin or with permission to create IAM resources.
2. Navigate to the IAM console.
3. Click on Users
4. Create a new user (Add user)
5. Set the username of your choice or meghops
6. Select "Attach existing policies directly" and select the SecurityAudit policy.
7. Now click on "Create policy" to create a supplemental policy (since some permissions are not included in SecurityAudit).
8. Click the "JSON" tab and paste the following permission set.

   {
       "Version": "2012-10-17",
       "Statement": [
           {
               "Effect": "Allow",
               "Action": [
                   "ses:DescribeActiveReceiptRuleSet",
                   "athena:GetWorkGroup",
                   "logs:DescribeLogGroups",
                   "logs:DescribeMetricFilters",
                   "elastictranscoder:ListPipelines",
                   "elasticfilesystem:DescribeFileSystems",
                   "servicequotas:ListServiceQuotas"
               ],
               "Resource": "*"
           }
       ]
   }
9. Click on next
10. Provide a name and click Create policy
11. Return to the Create user page and attach the newly-created policy. Then click Next: tags. (Make sure you refresh the page otherwise, you might not see the newly created policy)
12. Set tags as needed and then click on Create user. New user will be created
13. Now to generating the access credentials goto Users
14. Select the user you created a few moments ago.
15. Now goto Security credentials tab
16. Scroll down to the Access keys section and click on Create access key
17. Now select Application running outside AWS then Next
18. Finally, give a descriptive name and click on Create access key
19. Make sure you safely store the Access key ID and Secret access key, those will need on the MeghOps platform.

• (Optional) If you want to use this account for MeghStats as well, then create a new policy with the following permission and attach it to the account, by following 7-11 steps. Or you can use a different account for MeghStats following this guide

  {
      "Version": "2012-10-17",
      "Statement": [
          {
              "Effect": "Allow",
              "Action": [
                  "cloudwatch:GetMetricData",
                  "cloudwatch:GetMetricStatistics",
                  "cloudwatch:ListMetrics",
                  "logs:DescribeLogGroups",
                  "logs:FilterLogEvents"
              ],
              "Resource": "*"
          }
      ]
  }

Now let's add this credential to MeghOps

1. Goto https://app.meghops.com/auth/login and login with your account
2. Now go to settings by clicking the top right corner ( Profile avatar) then Settings
3. From the settings page go to Cloud accounts then click on Add credential.
   
4. Now from this dialog select AWS and checkmark on Scan now put your AWS credential then click on Submit
5. Done!