Connect to another AWS account in Visual Studio Team Explorer - amazon-web-services

I installed AWS Toolkit for Visual Studio 2017. I clicked "Connect" and provided all the necessary keys. It got connected to my office AWS account.
Now I have a free account of AWS for learning purpose. I have a sample repository in CodeCommit under free account. Now I want to connect to this account.
Whenever I click "Connect", it automatically connects to office account and not offering me to enter credentials of the free account.
I opened "Manage Connections", but there I can only add a new Microsoft account not AWS.

You need to add your free account as a profile. The Providing AWS Credentials guide will walk you through adding multiple AWS profiles. Then, when you click "Connect" a pop up will allow you to choose the AWS profile that you would like for the connection. Once connected, there is an option to sign out if you would like to connect with a different profile.

Related

Google Cloud Platform - Resource of type "Organisation"

I wanted to setup my cloud identity but its asking me to verify the domain that is already hosted on GCP. Can you help me with Cloud Identity setup with a proper organisation created (today its named "No Organisation"). I'm the admin for this account DOMAIN: we host our Corporate website on GCP with domain already registered with DNS services in google.
on the GCP Identity page its also giving me the following message.
Your current account, k*****.***a#DOMAIN.NL, is not associated with an organization on Google Cloud. This checklist is designed for administrators who are trusted with complete control over a company’s Google Cloud resources. If you already have an administrator account for your organization, sign in with the account now. Or, ask your company administrator to start the checklist.
I guess I'm stuck in a Chicken-n-Egg problem.
You need to create a Google Workspace account. Create it on your domain DOMAIN.NL, with you as 1st admin user and with subscription plan or not (in my case, I wasn't able to remove the 15 days of trial. Get it, you will be able to remove the trial subscription later (in the user list) on the admin.google.com Workspace console). You are able to create your org for free, but it's absolutely not clear!!
From the new user account that you have created on your Workspace domain (you#DOMAIN.NL), you will be able to reach the console (console.cloud.google.com) and you have your org.
Now you need to migrate the projects and to review the authorization. You also need to (re)create a Billing Account.
I didn't find another way to achieve this.

how do I add additional admin users for gcp console access for a gcp project?

I'm working on a GCP project for a client of mine. I need the ability to give my client access to the GCP Console for the project. For example, if my client is traveling and he wants to access his database via MySQL Workbench then he'll need to update the SQL Connections Public IP list with the public ip address for whatever wifi network he's currently connected to. He could contact me to do that for him, but I would rather give him the ability to do this independently, since I'll eventually be turning the system over to him anyway.
So how can I add my client to my GCP account? Essentially, I want my client to be able to log into GCP and see everything that I see when I log into GCP as the owner of the account. I don't want to give my client my GCP login credentials since I may need to create other GCP projects for other clients with those credentials.
For being connected on GCP, your customer need to have a Google account (GMail, GSuite, or something else compliant).
If it hadn't, it can create an account for free in seconds, or it can reuse an existing not Google email to create an account with this email as login and the password of his choice:
Go to https://accounts.google.com/
Select create account
Select Use my current email address instead
Then, as narayansharma said, go to IAM page and add this email to your project. I absolutely don't recommend you to grant to your customer the owner role, because he will be able to do all (create big VM, open any firewall rules, delete resources,...), but select only the roles that you want to grant to him. If you aren't sure, ask here what is the correct role for your customer usage, and we will be able to help you
Note: For a connection to Cloud SQL, instead of allowing external IP to reach your database, I recommend you to use Cloud SQL proxy.
You can easily give permission to your client via IAM.
Please follow the given instructions.
Go to IAM https://console.cloud.google.com/iam-admin/iam and check with your project is correct or not.
Click on the add button from the page. It will open a pop-up, enter your client email address on the new member field.
Select project owner roles from roles field.
Click on save
After save your client can access your project via his personal email.
I hope it will help you.

Cannot delete AWS Mobile Hub project

I am a user in a group with an attached policy of AdministratorAccess. Despite this when I attempt to delete an AWS Mobile Hub project, I get the following:
Failed to delete project.
It looks like you do not have permission for this operation.
Then links me to the following page: https://docs.aws.amazon.com/aws-mobile/latest/developerguide/reference-mobile-hub-iam-managed-policies.html
At this time Mobile Hub requires a service role to perform operations in your AWS account, including deleting project resources. You can create the service role at the following link:
https://console.aws.amazon.com/mobilehub/home?#/activaterole/
We are planning on removing the service role in the future so Mobile Hub will use your account permissions to perform actions in your account. Once this change takes effect you will no longer need to have the service role in your account and administrator user permission will work without issue. You can find more information about this change here:
https://docs.aws.amazon.com/aws-mobile/latest/developerguide/reference-mobile-hub-project-permissions-model.html
Sincerely,
Dan G
AWS Mobile Developer Experience

Error accessing AWS through Visual Studio 2017

I'm trying to connect to AWS (Amazon Web Services) using Visual Studio 2017. However, in the AWS Explorer in Visual Studio, it says "Failed to connect to AWS".
I created an account in the AWS IAM Management Console.
I assigned this account AdministratorAccess and created access keys.
I installed the AWS SDK for .NET for Visual Studio 2017.
In the Visual Studio AWS Explorer, I selected and created a New Account Profile.
The AWS Explorer shows "Failed to connect to AWS". (The Region list is still disabled.)
It seems like a rather simple process, but it's not working for me.
As a credential test, I set up the AWS CLI (Command Line Interface). Then I ran aws configure using the same Access key ID and Secret access key. I was able to access AWS--e.g. aws iam list-users and aws lambda list-functions. (I have some test lambda functions in my account already, and they showed up.)
What am I missing? Let me know if you need any more info.
Thanks.
Ok, so now it's suddenly working. I hadn't touched it for a while, and then clicked 'Refresh' in the AWS Explorer. The Regions list is now populated and all of my services are displayed.
Is it possible that AWS takes a while to propagate users and access? Just a thought.
-- Update
I tried again the following day, and now I get the original error again. I have not changed anything. In fact, my dev environment was left open overnight.
What the heck could have possibly changed?
Do you have the Fiddler installed and running? If yes, please close the Fiddler and try again.

Setup Amazon account on Intellij

I would like to setup mu Amazon account on Intellij AWS plugin.
I want to be able to access S3 and EC2.
I have the Intellij AWS plugin installed, but I can't figure out how to login with my Amazon credentials.
As you can see here (image below), I can choose an account, but I can't figure out where to set it up.
Screenshot:
Open Settings dialog (File->Settings).
In AWS->Accounts section create a new account and enter account number, access key ID and secret access key. (You can get them in your AWS account profile)
Press "Test Connection" button to verify that your settings are correct.
Press "Apply" after you are finished.