1. Log on to your AWS Management Console.
2. Load the Identity and Access Management (IAM) dashboard.
3. Under the Users section, click Create User.
4. Type a user name.
5. Select the option Generate an access key for each user, and then click Create.
6. Click Download Credentials, and then save the .csv file. These credentials contain both the Access Key and the Secret Key.
7. Close the window.
    

1. In the navigation pane, click Policies, Create New Policy.
2. Under the Create Policy section, click Create your own Policy.
3. Type a name and description.
4. Copy and paste one or more of the following policies, based on your requirements:

1. Log on to your AWS management console.
2. To load the IAM dashboard, select IAM.
3. Type the name McafeeFlowLogger for your role, and then click Next.
   NOTE: The name of the role must be McafeeFlowLogger, and it is case sensitive.
4. On the Select Role Type page next to Amazon EC2, click Select.
5. On the Attach Policy page, click Next Step.
6. On the Review page, make a note of the ARN for your role, and then click Create Role.
7. Type a name for your role.
8. Under Permissions, expand the Inline Policies section, and then click Click Here.
9. Select Custom Policy, and then click Select.
10. Copy this policy and paste it in the Policy Document window. Type a name for your policy in the Policy Name field, and then click Apply Policy.
    
    {
    "Version": "2012-10-17",
                "Statement": [
                          {
                            "Action": [
                                        "logs:CreateLogGroup",
                                        "logs:CreateLogStream",
                                        "logs:PutLogEvents",
                                        "logs:DescribeLogGroups",
                                        "logs:DescribeLogStreams"
                               ],
                                "Effect": "Allow",
                                 "Resource": "*"
                              }
                      ]
    }
     
11. This policy enables the VPC flow log at the VPC level, for the AWS account:
    1. Select the option Edit Trust Relationship.
    2. Delete any existing policy document.
    3. Copy and paste this policy, and click Update Trust Policy.
       
       {
       "Version": "2012-10-17",
                     "Statement": [
                     {
                      "Sid": "",
                      "Effect": "Allow",
                      "Principal": {
                                  "Service": "vpc-flow-logs.amazonaws.com"
                                   },
                       "Action": "sts:AssumeRole"
                       }
                       ]
       }
        

The Secret Access key is generated when you create the Access key. Use the Access key and the Secret Access key while registering your cloud account using CWS in ePO.

1. Under the Users section, select the user, and then click Attach Policy.
2. On the Summary page, click Add Permissions and select Attach existing policies directly.
3. Select the policy that you created, and then attach the policy.
4. Go back to the Summary page and click the Security Credentials tab.
5. Click Create access key.