{"id":11297,"date":"2015-10-07T23:41:01","date_gmt":"2015-10-07T19:41:01","guid":{"rendered":"http:\/\/www.msp360.com\/blog\/?p=11297"},"modified":"2025-11-19T15:46:21","modified_gmt":"2025-11-19T11:46:21","slug":"how-to-configure-vmimport-role","status":"publish","type":"post","link":"https:\/\/www.msp360.com\/resources\/blog\/how-to-configure-vmimport-role\/","title":{"rendered":"How to Setup VMimport Role"},"content":{"rendered":"

In this post, we provide a step-by-step instruction on how to configure Amazon VMimport Role<\/a> in order to import virtual machine images from your existing environment to Amazon EC2 instances<\/a>. <\/p>\n

How to Configure VMimport Role<\/h2>\n

1. Go to\u00a0Amazon Web Services,<\/strong>\u00a0log in\u00a0<\/strong>using your Amazon\u00a0credentials and click on IAM<\/strong>, under Security, Identity & Compliance<\/em>.<\/p>\n

\"\"<\/p>\n

\n
\n
FREE WHITEPAPER<\/div>\n
Mastering AWS IAM for Amazon S3<\/div>\n
Learn how to effectively manage the security of your Amazon S3 account to protect your and your clients' data<\/div>\n\"CTA\"<\/a><\/span><\/span>\n<\/div>\n
\"WP<\/div>\n<\/div>\n

2. Navigate to\u00a0Roles<\/strong> on the left-hand sidebar and click Create Role<\/strong>.<\/p>\n

\"\"<\/p>\n

3. Select the type of trusted entity. You need AWS service<\/strong>. Next, select the service that will use this role (EC2<\/strong>). Finally, select the required case (EC2<\/strong>).<\/p>\n

\"\"<\/p>\n

4. Skip the next step by clicking Next: Review<\/strong>.<\/p>\n

\"\"5. Enter the role's name, review the role's information and click Create Role<\/strong>.<\/p>\n

\"\"<\/p>\n

6. Click on your new role to edit policies.<\/p>\n

\"\"<\/p>\n

7. Under Permissions<\/strong>, click Add Inline Policy<\/strong>.<\/p>\n

8. Switch to the JSON editor and insert the following policy:<\/p>\n

{\r\n   \"Version\":\"2012-10-17\",\r\n   \"Statement\":[\r\n      {\r\n         \"Effect\":\"Allow\",\r\n         \"Action\":[\r\n            \"s3:ListBucket\",\r\n            \"s3:GetBucketLocation\"\r\n         ],\r\n         \"Resource\":[\r\n            \"arn:aws:s3:::bucket<\/b>\"\r\n         ]\r\n      },\r\n      {\r\n         \"Effect\":\"Allow\",\r\n         \"Action\":[\r\n            \"s3:GetObject\"\r\n         ],\r\n         \"Resource\":[\r\n            \"arn:aws:s3:::bucket<\/b>\/*\"\r\n         ]\r\n      },\r\n      {\r\n         \"Effect\":\"Allow\",\r\n         \"Action\":[\r\n            \"ec2:ModifySnapshotAttribute\",\r\n            \"ec2:CopySnapshot\",\r\n            \"ec2:RegisterImage\",\r\n            \"ec2:Describe*\"\r\n         ],\r\n         \"Resource\":\"*\"\r\n      }\r\n   ]\r\n}<\/pre>\n
Ensure that instead of buckets\u00a0<\/strong>you've specified the name of your S3 bucket that will contain the image. When done, review the newly created policy and click Create Policy<\/strong>.<\/p>\n
\"\"<\/p>\n
9. Expand the Trust Relationships<\/strong> section and click on Edit Trust Relationships<\/strong>.\"\"10. Insert the following script in the Policy Document<\/strong> editor:<\/p>\n
\n
{<\/div>\n
\u00a0 \"Version\": \"2012-10-17\",<\/div>\n
\u00a0 \"Statement\": [<\/div>\n
\u00a0 \u00a0 {<\/div>\n
\u00a0 \u00a0 \u00a0 \"Sid\": \"\",<\/div>\n
\u00a0 \u00a0 \u00a0 \"Effect\": \"Allow\",<\/div>\n
\u00a0 \u00a0 \u00a0 \"Principal\": {<\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 \"Service\": \"vmie.amazonaws.com\"<\/div>\n
\u00a0 \u00a0 \u00a0 },<\/div>\n
\u00a0 \u00a0 \u00a0 \"Action\": \"sts:AssumeRole\",<\/div>\n
\u00a0 \u00a0 \u00a0 \"Condition\": {<\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 \"StringEquals\": {<\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \"sts:ExternalId\": \"vmimport\"<\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 }<\/div>\n
\u00a0 \u00a0 \u00a0 }<\/div>\n
\u00a0 \u00a0 }<\/div>\n
\u00a0 ]<\/div>\n
}<\/div>\n<\/div>\n
<\/div>\n
When done, click Update Trust Policy<\/strong>.<\/div>\n
\n
<\/div>\n<\/div>\n
 <\/p>\n
Your VM import role is now entirely and properly configured!<\/p>\n
Further Resources for MSP360<\/h3>\n
RMM<\/b><\/a> Platform:<\/b> This flagship product provides powerful<\/span> monitoring and alerting<\/span><\/a> and automated<\/span> patch management<\/span><\/a> and <\/span>HALOPSA integration<\/span><\/a>, to ensure endpoints remain secure and operate smoothly.<\/span><\/p>\n
Start securing your IT environment today with our<\/span> Free Backup Software<\/span><\/a> or explore the full range of features. We are a<\/span> trusted company<\/span><\/a> committed to your success.<\/span><\/p>\n
Managed Backup<\/b><\/a>:<\/b> This service offers<\/span> reliable cloud backup<\/span><\/a> and image-based protection. A key feature is the dedicated<\/span> SaaS backup<\/b><\/a> for popular platforms:<\/span><\/p>\n
Microsoft 365<\/span><\/a>, including<\/span> OneDrive backup<\/b><\/a>,<\/b> Outlook Backup<\/span><\/a> features, Google Workspace<\/a> and the benefits of Domain Management.<\/a><\/span><\/p>\n
Finally, find videos aimed to guide you through installation processes for the cloud storage of your choice<\/a>, with advanced features of MSP360 Explorer, an overview the support for AWS Key Management Service in MSP360 Backup.<\/a><\/p>\n
 <\/p>\n
 <\/p>\n","protected":false},"excerpt":{"rendered":"
In this post, we provide a step-by-step instruction on how to configure Amazon VMimport Role in order to import virtual machine images from your existing environment to Amazon EC2 instances.<\/p>\n","protected":false},"author":2,"featured_media":27427,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[877,894,882],"tags":[],"class_list":["post-11297","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog-articles","category-msp360-backup","category-msp360-news"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/posts\/11297","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/comments?post=11297"}],"version-history":[{"count":6,"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/posts\/11297\/revisions"}],"predecessor-version":[{"id":61351,"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/posts\/11297\/revisions\/61351"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/media\/27427"}],"wp:attachment":[{"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/media?parent=11297"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/categories?post=11297"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/tags?post=11297"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}