Prerequisites for setting up Amazon Neptune using Amazon CloudFormation
Before you create an Amazon Neptune cluster using an Amazon CloudFormation template, you need to have the following:
An Amazon EC2 key pair.
The permissions required for using Amazon CloudFormation.
Create an Amazon EC2 Key Pair to use for launching a Neptune cluster using Amazon CloudFormation
In order to launch a Neptune DB cluster using an Amazon CloudFormation template, you must have an Amazon EC2key pair (and its associated PEM file) available in the region where you create the Amazon CloudFormation stack.
If you need to create the key pair, see either Creating a Key Pair Using Amazon EC2 in the Amazon EC2 User Guide, or Creating a Key Pair Using Amazon EC2 in the Amazon EC2 User Guide for instructions.
Add IAM policies to grant permissions needed to use the Amazon CloudFormation template
First, you need to have an IAM user set up with permissions needed for working with Neptune, as described in Creating an IAM user with permissions for Neptune.
Then you need to add the Amazon managed policy, AWSCloudFormationReadOnlyAccess,
to that user.
Finally, you need to create the following customer-managed policy and add it to that user:
Important
You must create this as a customer-managed policy, not as an
inline policy. The total size of all inline policies for an IAM user cannot exceed 2,048
non-whitespace characters, and this policy exceeds that limit. For more information, see
IAM
and STS character limits
Note
The following permissions are only required to delete a stack:
iam:DeleteRole, iam:RemoveRoleFromInstanceProfile,
iam:DeleteRolePolicy, iam:DeleteInstanceProfile, and
ec2:DeleteVpcEndpoints.
Also note that ec2:*Vpc grants ec2:DeleteVpc
permissions.