Obtaining IDs for environment provisioning

Before creating a cross-account IAM role on AWS, log in to the Cloudera web interface and obtain the parameters that you need to provide for the IAM role:

Go to Shared Resources > Credentials > Create Credential in the Cloudera Management Console.
Note or copy the Cross-account Access Policy, Account ID, and External ID listed in the UI:

note

The External ID is tied to the Cloudera user who obtained it. Therefore, only the user who obtained the external ID is able to complete the credential creation flow in Cloudera with a given external ID. If a Cloudera user tries to use an IAM role with an external ID obtained by another Cloudera user, Cloudera will return an error message.