Before you start

verify your environment meets these requirements supported hardware {{ch}} , 7 0 2 x or later you must configure the cryptohub dashboard connection with a tls certificate issued by a publicly trusted certificate authority required access an account on the {{ch}} with administrator permissions to deploy new services an aws iam role assigned the awskeymanagementservicepoweruser aws managed policy, along with the customer managed policy below, which grants additional permissions needed to test xks end to end { "version" "2012 10 17", "statement" \[ { "sid" "xkscustomkeystoreadmin", "effect" "allow", "action" \[ "kms\ createcustomkeystore", "kms\ describecustomkeystores", "kms\ connectcustomkeystore", "kms\ disconnectcustomkeystore", "kms\ updatecustomkeystore", "kms\ deletecustomkeystore" ], "resource" " " } ] }