Step 1: Setup a discovery user

Note: To make resource planning as easy as possible, Red Canary has provided a docker image to run the discovery script. The docker image can be found in the docker hub. Follow the steps below to pull the docker image and run the discovery script.

The Red Canary Discovery User will list AWS regions, list accounts in your organization, and assume the Red Canary Discovery Roles in your organization’s accounts.

Create this user by running AWS CloudFormation templates.

1. Log into the AWS console for your Account, or if using Organizations, your Master Account.
2. Navigate to CloudFormation.
   
3. Click Create stack.
   
4. Click With new resources (standard).
   
5. Select Template is ready.
6. Select Upload a template file.
7. Click the Choose File button.
   
8. Select the red-canary-resource-discovery-user.yaml you downloaded.
9. Click Next.
   
10. Enter a Stack name.
    
11. Enter a RedCanaryResourceDiscoveryUserName﹣we suggest leaving the default red-canary-resource-discovery-user.
12. Click Next.
    
13. Leave all of the Configure Stack Options as their defaults.
14. Click Next.
15. Scroll to the bottom of the Review page.
16. Click the agreement.
17. Click Submit.
    
18. When the stack set creation is complete click the Outputs tab.
    
19. Copy the User ARN from the outputs, you will need this in future steps.
    

Note: Once this process is completed, continue on with setting up a Discovery Role in the primary account.