Configuration

The Aminator config module comments provide detailed information on each configurable and how to override.

---

Account Keys

Aminator leverages boto for AWS interaction. You can use a boto config file for access keys or an IAM role. Instances with an IAM role association are presented with temporary account credentials through the private meta-data service. The boto library can transparently fetch these credentials so no special configuration is required for Aminator to interact with AWS. A role with the following policy is all that is required for Aminator to function.

Sample Policy

``` { "Statement": [ { "Sid": "Stmt0123456789012", "Action": [ "ec2:AttachVolume", "ec2:CopySnapshot", "ec2:CreateSnapshot", "ec2:CreateTags", "ec2:CreateVolume", "ec2:DeleteSnapshot", "ec2:DeleteTags", "ec2:DeleteVolume", "ec2:DeregisterImage", "ec2:DetachVolume", "ec2:RegisterImage", "ec2:Describe*" ], "Effect": "Allow", "Resource": [ "*" ] } ] } ```