Creating an IAM role for your Aspera on Demand for AWS Marketplace


This article provides step by step instructions for creating the IAM role that is required for use with your Aspera on Demand from the AWS marketplace. This IAM role created here will cover both the AWS Marketplace reporting as well as S3 access permissions.


This article assumes the following:

  • You plan to provision the new Faspex on Demand from the Amazon Marketplace, which requires the IAM Role.
  • You have created an S3 bucket for using with Faspex.
  • You are logged into your AWS console and your account permits you to create IAM policies and roles.


  1. Navigate to the IAM role dashboard by clicking on the Identity and Access management feature.
  2. From the left side navigation list, select Policies and then click on "Create Policy".
  3. In the following screen, click on 'Create Your Own Policy" by clicking on the Select button.
  4. In the Review Policy screen, provide a Policy Name, Description and Policy Document, as shown in the screenshot below.  Once you have entered the correct text, click 'Create Policy'.
  5. Note: Below you can find a copy and paste version of the policy.   
  6. From the left side navigate list, select 'Roles' from the list and click on 'Create Role'. 
  7. Specify a name for your new Role.
  8. Choose the "Amazon EC2" Role Type by clicking on the 'Select' button.
  9. Attach the following two policies to your Role
    1. AmazonS3FullAccess  (standard policy)
    2. AWSMarketplaceMetering (custom policy)
  10. Click on Next
  11. Review the IAM Role that you are about to create, and then click on the 'Create Role' button.
  12. From the main IAM dashboard, search for your new role, to confirm it was created, and click on it to see the attached policies.
  13. Congratulations.  You have completed creating your new Role.  Please use this role when launching your Aspera On Demand Product from the AWS Marketplace.


Additional Policy Details

Additional information and advanced examples can be found in these KB articles: 


Here is the required IAM policy for using Aspera via the AWS Marketplace:

"Version": "2012-10-17",
  "Statement": [
            "Action": [
            "Effect": "Allow",
            "Resource": "*"
Powered by Zendesk