euare-rolecreate

Creates a role.

Syntax

euare-rolecreate rolename [-p path] (-f filename | -s servicename) 
	[-v] [--as-account account]

Options

Option Description Required
rolename Name of the role with which to associate the policy. This option is exclusive and positional. Yes
-p, --path path The path to the user. For more information about paths, go to Identifiers for IAM Entities. If you do not enter a value, the value defaults to a slash (/). No
-f filename Name of the file containing the new role's trust policy. Must be specified if servicename is not present. No
-s, --service servicename Name of the service to allow access to the role. Must be specified if filename is not present.

Example:ec2.amazonaws.com

No
-v, --verbose Display the new role's ARN GUID and policy. No
--as-account account [Eucalyptus cloud administrator only] Run this command as the administrator of another account. No

Common Options

Option Description
--region=region Region to direct requests to.
-U url,--url=url Override service URL with this value.
--as-account account This Eucalyptus extension is for use by the system administrator to act as the account administrator of the specified account without changing to account administrator's role.
-I access_key_id, --access-key=access_key_id Override configured access key ID with this value.
-S secret_key, --secret-key=secret_key Override configured secret key with this value.
--security-token=token Security token.
-D, --debug Prints what the command sends to the server and what it receives from the server. Use when you're trying to debug Euca2ools.
--debugger Enable interactive debugger on error.
-h,--help Display the manual page for the command.
--version Display the version of this tool.

Output

Eucalyptus returns no message unless you requested it using -v. In that case, Eucalyptus outputs new role and policy information.

Example

The following example creates a role, myrole, with Amazon services access to it.

euare-rolecreate myrole -s ec2.amazonaws.com
x