Skip to main content

Client AWS Account

caution

It is advised not to tamper test nodes during execution.

Requirements from client​

  • AWS account id (12 digit number)
  • API access key ID
  • API access key secret

AWS account should have two policies attached:

  • AmazonEC2FullAccess
  • AmazonS3FullAccess

The account should have Hong Kong region enabled, otherwise Loadero will not be able to use that account.

Each of these requirements is necessary for node setup in the client's environment. Since we need to prepare media files and dependencies, that take up a lot of space, it is unreasonable to create launcher scripts that would prepare all this environment for each new test run.

Security concerns​

Handing out API access key ID and secret may seem like a direct security hole. But all of this is necessary for us to launch tests on the client's AWS.

For additional security, a new IAM user should be created for the sole purpose of running Loadero tests. This user will not have access to any nodes launched from other users and environments, thus limiting any possible out of scope actions for Loadero. Also, having a separate IAM role will allow the main user to control billing and running nodes that are launched by Loadero account.