Add a Primary AWS Account

By adding a primary AWS Account, you can automatically add all the linked AWS Accounts in your organization in the vRealize Network Insight.

Prerequisites

• Firewall Configuration for AWS API Access.
• Create a Primary and Linked Account Policy.
• Create a Role in AWS.
• Create a User in AWS Account.
• Get your Amazon Access Key ID that you created in the AWS console. For more details, see http://docs.aws.amazon.com/general/latest/gr/managing-aws-access-keys.html.
• Get the role Amazon Resource Names (ARN) of the linked AWS account. See, Amazon Resource Names (ARNs) and AWS Service Namespaces

Procedure

1. Go to Settings > Accounts and Data Sources.
2. Click Add Source.
3. Under the Public Clouds, select Amazon Web Services.
4. In the Add a New AWS Account or Source page, provide the required information.

   Option	Action
   Collector VM	Select a collector VM from the drop-down menu.
   Access Key ID	Enter your Amazon Access Key ID.
   Secret Access Key	Enter the corresponding Secret Access Key. Note: vRealize Network Insight takes 15–20 minutes to collect your AWS account data.
   Web Proxy (Optional)	Select a web proxy from the drop-down menu.

5. Click Validate.
   If the number of VMs discovered exceeds the capacity of the platform or a collector node, or both, the validation fails. You will not be allowed to add a data source until you increase the brick size of the platform or create a cluster. The specified capacity for each brick size with and without flows is as follows:

   Brick Size	VMs	State of Flows
   Large	6k	Active
   Large	10k	Deactivate
   Medium	3k	Active
   Medium	6k	Deactivate

6. After validation of your AWS account completes, select the Add Linked Accounts Automatically (Only for Master Account) check box.
   1. In Role ARN, enter the role - Amazon Resource Names of the linked AWS account to trust the primary AWS Account.
7. To get deeper insight of your environment, select the Enable Flow data collection (Highly Recommended) check box.
8. (Optional) To enable region specific access, select the Allow access to specific AWS regions only check box.
9. (Optional) In the Nickname text box, enter a nickname.
10. (Optional) In the Notes text box, add a note if necessary.
11. Click Submit.

Results

vRealize Network Insight validates Role ARN and adds the account.