Migrating to IAM Roles Anywhere Connections

To migrate from an access key and secrets-based connection to an IAM Roles Anywhere-based connection:

1. Upgrade to the CipherTrust Manager to the latest version. Refer to System Upgrade/Downgrade for details.

2. On the CipherTrust Manager, create an AWS connection with IAM Roles Anywhere enabled. Refer to the following sections for details:

   1. Prerequisites

   2. Additional Configuration for AWS IAM Roles Anywhere

   3. Connection Manager

3. Open the Cloud Key Manager application.

4. In the left pane, click KMS Containers > AWS KMS Accounts.

5. Update the desired AWS KMS account with the AWS IAM Roles based connection (created above).

6. Verify that all the KMS operations are working as expected.