# Create custom role

1. On the **IAM** page under **Access management** in the sidebar menu click **Roles**

![](/files/DylumxgooZRY6kVNWxuv)

2. Click **Create role**

![](/files/kbgSZ7xIKQDymtPW1uSA)

3. Select AWS account

![](/files/KZuif1irBbKzG6juVRJC)

4. You're going to need Netography's **Account ID** and the custom **External ID** created in your Fusion account for the next step

These settings can be found In Netography Fusion, under **Settings** -> **Overview**.

![](/files/TzpGpapfXmmupYPamT8g)

5. In AWS Select **Another AWS account** before pasting in the **Account ID** you copied from Netography Fusion, then check the box for **Require external ID** and paste in the External ID. Click **Next**.

![](/files/uBauTxu5sP0hE314uEBT)

6. Search for the policy name you created during the [Create IAM policy](/quick-start/quickstart-aws/create-iam-policy.md) step and check the box. **Permissions policies** should show **1**.

![](/files/OkfN2gv0532FNSw3hpz2)

7. Search for AmazonEC2ReadOnlyAccess and check the box. **Permissions Policies** should show **2**.

This will add permissions for context enrichment.

![](/files/ZqQUJK23BmIm3j9O1oRp)

8. Click **Next**

![](/files/87l50hDqpXR22Gndqzxp)

9. Give your role a name.

![](/files/sAepV3wKV2EsRFCs2dTJ)

10. The **Trust policy** is created by default and should contain the AWS Account ID and External ID you entered earlier, nothing needs to be done here, it's just to verify everything looks correct.

![](/files/tfU4xgGm4X2x8qgIoRFV)

11. Click **Create role**

![](/files/9NWsezzU1oUVx3tvjQoC)

12. Next you'll need to copy and save the ARN of your newly created role, this is going to be needed to authenticate Netography Fusion in a later step. Search for the name you gave your role and click your role name.

![](/files/fHTEXl2WfE0Ol0ONroYC)

13. Copy and save your role ARN for later.

![](/files/PGJ3GpIwRNbbGX3bQp8I)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.fusion.vectra.ai/quick-start/quickstart-aws/create-custom-role.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.