Step 2: Setup a Discovery Role in the primary account

To scan your Account, or your primary account if you're using organizations, you'll need to add a role with resource discovery permissions.

1. Navigate to CloudFormation.
   
2. Click Create stack.
   
3. Click With new resources (standard).
   
4. Select Template is ready.
5. Select Upload a template file.
6. Click the Choose file button
   
7. Select the red-canary-resource-discovery-user.yaml you downloaded.
8. Click Next.
   
9. Enter the stack name.
10. Enter the RedCanaryResourceDiscoveryRoleName ﹣ we suggest leaving it the default red-canary-resource-discovery-role
11. Enter the RedCanaryResourceDiscoveryUserARN from the user created in the Setup Discovery User section.
12. Click Next.
    
    
13. On the Configure stack options click Next.
    
14. Scroll to the bottom of the Review page.
15. Click the agreement.
16. Click Submit.
    

Note: Once this process is completed, continue on with setting up a Discovery Role in sub accounts (if using organizations).