Step 1: Set Up an Amazon Account and Create an Administrator User - Amazon Kinesis Data Streams
Sign Up for AmazonCreate an IAM UserNext Step
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Step 1: Set Up an Amazon Account and Create an Administrator User

Before you use Amazon Managed Service for Apache Flink for Flink Applications for the first time, complete the following tasks:

  1. Sign Up for Amazon

  2. Create an IAM User

Sign Up for Amazon

When you sign up for Amazon Web Services (Amazon), your Amazon account is automatically signed up for all services in Amazon, including Amazon Managed Service for Apache Flink. You are charged only for the services that you use.

With Managed Service for Apache Flink, you pay only for the resources that you use. If you are a new Amazon customer, you can get started with Managed Service for Apache Flink for free. For more information, see Amazon Free Tier.

If you already have an Amazon account, skip to the next task. If you don't have an Amazon account, follow these steps to create one.

To create an Amazon account

  1. Open https://portal.amazonaws.cn/billing/signup.

  2. Follow the online instructions.

    Part of the sign-up procedure involves receiving a phone call and entering a verification code on the phone keypad.

    When you sign up for an Amazon Web Services account, an Amazon Web Services account root user is created. The root user has access to all Amazon Web Services and resources in the account. As a security best practice, assign administrative access to a user, and use only the root user to perform tasks that require root user access.

Note your Amazon account ID because you'll need it for the next task.

Create an IAM User

Services in Amazon, such as Amazon Managed Service for Apache Flink, require that you provide credentials when you access them. This is so that the service can determine whether you have permissions to access the resources that are owned by that service. The Amazon Web Services Management Console requires that you enter your password.

You can create access keys for your Amazon account to access the Amazon Command Line Interface (Amazon CLI) or API. However, we don't recommend that you access Amazon using the credentials for your Amazon account. Instead, we recommend that you use Amazon Identity and Access Management (IAM). Create an IAM user, add the user to an IAM group with administrative permissions, and then grant administrative permissions to the IAM user that you created. You can then access Amazon using a special URL and that IAM user's credentials.

If you signed up for Amazon, but you haven't created an IAM user for yourself, you can create one using the IAM console.

The getting started exercises in this guide assume that you have a user (adminuser) with administrator permissions. Follow the procedure to create adminuser in your account.

To create a group for administrators

  1. Sign in to the Amazon Web Services Management Console and open the IAM console at https://console.amazonaws.cn/iam/.

  2. In the navigation pane, choose Groups, and then choose Create New Group.

  3. For Group Name, enter a name for your group, such as Administrators, and then choose Next Step.

  4. In the list of policies, select the check box next to the AdministratorAccess policy. You can use the Filter menu and the Search box to filter the list of policies.

  5. Choose Next Step, and then choose Create Group.

Your new group is listed under Group Name.

To create an IAM user for yourself, add it to the Administrators group, and create a password

  1. In the navigation pane, choose Users, and then choose Add user.

  2. In the User name box, enter a user name.

  3. Choose both Programmatic access and Amazon Management Console access.

  4. Choose Next: Permissions.

  5. Select the check box next to the Administrators group. Then choose Next: Review.

  6. Choose Create user.

To sign in as the new IAM user

  1. Sign out of the Amazon Web Services Management Console.

  2. Use the following URL format to sign in to the console:

    https://aws_account_number.signin.aws.amazon.com/console/

    The aws_account_number is your Amazon account ID without any hyphens. For example, if your Amazon account ID is 1234-5678-9012, replace aws_account_number with 123456789012. For information about how to find your account number, see Your Amazon Account ID and Its Alias in the IAM User Guide.

  3. Enter the IAM user name and password that you just created. When you're signed in, the navigation bar displays your_user_name @ your_aws_account_id.

Note

If you don't want the URL for your sign-in page to contain your Amazon account ID, you can create an account alias.

To create or remove an account alias

  1. Open the IAM console at https://console.amazonaws.cn/iam/.

  2. On the navigation pane, choose Dashboard.

  3. Find the IAM users sign-in link.

  4. To create the alias, choose Customize. Enter the name you want to use for your alias, and then choose Yes, Create.

  5. To remove the alias, choose Customize, and then choose Yes, Delete. The sign-in URL reverts to using your Amazon account ID.

To sign in after you create an account alias, use the following URL:

https://your_account_alias.signin.aws.amazon.com/console/

To verify the sign-in link for IAM users for your account, open the IAM console and check under IAM users sign-in link on the dashboard.

For more information about IAM, see the following:

Next Step

Step 2: Set Up the Amazon Command Line Interface (Amazon CLI)