ºÚÁϺ£½Ç91Èë¿Ú

When you configure AWS roles in ºÚÁϺ£½Ç91Èë¿Ú, you need to create federated roles in AWS and collect the provider Amazon Resource Name (ARN) and the role ARNs. 

To create federated role in AWS:

1. Log in to the Amazon Web Services console for your organization as an administrator.
2. In the main console, go to All Services.
3. Under Security, Identity & Compliance, select IAM.
4. In the left hand side-nav, select Roles.
5. Select Create role.
6. For Select type of trusted entity, select SAML 2.0 federation.
7. For SAML provider, select ºÚÁϺ£½Ç91Èë¿Ú.
   
8. Select Allow programmatic and AWS Management Console access.
9. Select Next: Permissions.
10. Attach the desired permission policy for the role. 
11. Select Next: Review
12. Define a Role Name. 
13. Select Create role.

Collecting ARNs

To collect the provider ARN in AWS:

1. Log in to the Amazon Web Services console for your organization as an administrator.
2. In the main console, go to All Services.
3. Under Security, Identity & Compliance, select IAM.
4. Go to Providers, then select ºÚÁϺ£½Ç91Èë¿Ú. 
5. Collect the Provider ARN.
   

To collect the role ARNs in AWS:

1. Log in to the Amazon Web Services console for your organization as an administrator.
2. In the main console, go to All Services.
3. Under Security, Identity & Compliance, select IAM.
4. Go to Roles. 
5. Open each role to collect the Role ARN.