Dell APEX Navigator for Multicloud Storage Using Your Service

Edit encryption key policy in AWS

Update your key policy in AWS with policy statements provided by Dell APEX Navigator to grant Dell APEX Navigator necessary permissions during deployment of storage offers in AWS.

1. Go to the AWS management console.
2. Search for Key Management Service.
3. Select the option that allows you to securely generate and manage AWS encryption keys.
4. In the left navigation bar, select Customer-managed keys.
5. Select the default key enabled for the AWS account and AWS region for this deployment.
6. On the Key ID page under the Key policy tab, select switch to policy.
7. Review and verify that your key policy allows the Dell APEX Navigator AWS role access to the key with the required permissions.
8. Edit the AWS key policy if it does not allow Dell necessary access.
   Key policy statements to allow Dell access must be copied from below and added to the existing AWS key policy statements. The copied statements are templates.
9. Replace the following placeholder texts:
   • Replace <account-id> with the AWS account ID containing the AWS role that was granted to Dell.
   • Replace <APEXNavigator-role-name-with-path> with the AWS role name of the role that was granted to Dell.