> For the complete documentation index, see [llms.txt](https://docs.n2ws.com/quick-start/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.n2ws.com/quick-start/appendix-a-aws-authentication.md).

# Appendix A - AWS Authentication with N2W

For N2W to perform its backup and restore management functions, it needs to have the correct permissions assigned.

N2W supports two different types of AWS authentication during setup:

* AccessKey / SecretKey  
* Role-based authentication (recommended)

The permissions necessary have been combined into a JSON file for convenience and can be downloaded from the N2W Knowledge Base:

<https://n2ws.zendesk.com/hc/en-us/articles/28832964188573-Required-Minimum-AWS-IAM-permissions-for-N2W-operations>

1. At the top of your AWS console, select the **Services** tab. In the **Security Identity & Compliance** section, select **IAM**.
2. In the left menu, select **Policies**.

![](/files/ulvyg2c5lpwkS7cjhLG8)

&#x20;   3\. Select the **Create policy** button.

![](/files/FkRz1PCZnwCKEfSfTkxl)

&#x20;   4\. Select the **JSON** tab.

&#x20;   5\. Delete the default contents and copy and paste the contents of the JSON file downloaded from our Knowledge Base (see above).

![](/files/c2vIYn69DEc25uaohhhg)

&#x20;   6\. At the bottom of the screen, select **Next.**

&#x20;   7\. Type a **Name** for the policy, and select **Create policy**.

![](/files/2eRP3w3jl9NOzLhBIeU8)

&#x20;   8\. Create a role, and then assign the policy you just created to that role. In the left menu, select **Roles** and then select **Create role**.

![](/files/NZ1LSb3BMTrtsoq4HicS)

&#x20;   9\. In the list of **type of trusted entity**, select **AWS service** and then select **EC2**. \
&#x20;   10\. Select **Next: Permissions**.

![](/files/1L9xLcxsfXZIW9tJCo4v)

&#x20;   11\. On the **Add Permissions** page, search for the 3 previously created polices, and then select **Next.**

![](/files/UEAznYan5b5lyq900lGG)

&#x20;   12\. Name the **Role**, and select **Create Role**.

![](/files/qj1eo3IeAszPxeev2O7U)

&#x20;   13\.  Assign the resulting role to the N2W trial instance:

* Select the N2W instance name.
* In the **Actions** menu, select **Instance Settings** and then **Attach/Replace IAM Role**.

![](/files/NNehAHpD7IoxnDVgAPjh)

&#x20;&#x20;