> For the complete documentation index, see [llms.txt](https://docs.fusion.vectra.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.fusion.vectra.ai/cloud-onboarding/aws-cloud-onboarding/quickstart-aws/create-custom-role.md).

# Create custom role

1. On the **IAM** page under **Access management** in the sidebar menu click **Roles**

![](/files/DylumxgooZRY6kVNWxuv)

2. Click **Create role**

![](/files/kbgSZ7xIKQDymtPW1uSA)

3. Select AWS account

![](/files/KZuif1irBbKzG6juVRJC)

4. You're going to need Vectra's **Account ID** and the custom **External ID** created in your Fusion account for the next step

These settings can be found in Vectra Fusion, under **Settings** -> **Overview**.

![](/files/TzpGpapfXmmupYPamT8g)

5. In AWS select **Another AWS account** before pasting in the **Account ID** you copied from Vectra Fusion, then check the box for **Require external ID** and paste in the External ID. Click **Next**.

![](/files/uBauTxu5sP0hE314uEBT)

6. Search for the policy name you created during the [Create IAM policy](/cloud-onboarding/aws-cloud-onboarding/quickstart-aws/create-iam-policy.md) step and check the box. **Permissions policies** should show **1**.

![](/files/OkfN2gv0532FNSw3hpz2)

7. Search for AmazonEC2ReadOnlyAccess and check the box. **Permissions Policies** should show **2**.

This will add permissions for context enrichment.

![](/files/ZqQUJK23BmIm3j9O1oRp)

8. Click **Next**

![](/files/87l50hDqpXR22Gndqzxp)

9. Give your role a name.

![](/files/sAepV3wKV2EsRFCs2dTJ)

10. The **Trust policy** is created by default and should contain the AWS Account ID and External ID you entered earlier, nothing needs to be done here, it's just to verify everything looks correct.

![](/files/tfU4xgGm4X2x8qgIoRFV)

11. Click **Create role**

![](/files/9NWsezzU1oUVx3tvjQoC)

12. Next you'll need to copy and save the ARN of your newly created role. You will need it to authenticate Vectra Fusion in a later step. Search for the name you gave your role and click your role name.

![](/files/fHTEXl2WfE0Ol0ONroYC)

13. Copy and save your role ARN for later.

![](/files/PGJ3GpIwRNbbGX3bQp8I)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.fusion.vectra.ai/cloud-onboarding/aws-cloud-onboarding/quickstart-aws/create-custom-role.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.