Add a Primary AWS Account

By adding a primary AWS Account, you can automatically add all the linked AWS Accounts in your organization in the vRealize Network Insight.

Prerequisites

• Firewall Configuration for AWS API Access.
• Create a Primary and Linked Account Policy.
• Create a Role in AWS.
• Create a User in AWS Account.
• Get your Amazon Access Key ID that you created in the AWS console. For more details, see http://docs.aws.amazon.com/general/latest/gr/managing-aws-access-keys.html.
• Get the role Amazon Resource Names (ARN) of the linked AWS account. See, Amazon Resource Names (ARNs) and AWS Service Namespaces

Procedure

1. Log in to vRealize Network Insight.
2. Go to Settings > Accounts and Data Sources > Add Source.
3. Under the Public Clouds section, click Amazon Web Services.
4. Select the Collector VM.
5. Enter your Amazon Access Key ID and corresponding Secret Access Key.
   vRealize Network Insight takes 15–20 minutes to collect your AWS account data.
6. From the Web Proxy (Optional) drop-down menu, select a web proxy.
   Note: The Web Proxy (Optional) is visible only if you have configured a web proxy in vRealize Network Insight.
7. Click Validate.
   If the number of VMs discovered exceeds the capacity of the platform or a collector node, or both, the validation fails. You will not be allowed to add a data source until you increase the brick size of the platform or create a cluster. The specified capacity for each brick size with and without flows is as follows:

   Brick Size	VMs	State of Flows
   Large	6k	Enabled
   Large	10k	Disabled
   Medium	3k	Enabled
   Medium	6k	Disabled

8. After validation of your AWS account completes, select the Add Linked Accounts Automatically option.
9. In Role ARN, enter the role Amazon Resource Names of the linked AWS account to trust the primary AWS Account.
10. Enter Nickname and Notes for the data source.
11. Click Submit.
    vRealize Network Insight validates Role ARN and adds the account.