**To create your EBS Params Controller IAM role with the AWS Management Console**

1. Open the IAM console at https://console.aws.amazon.com/iam/

2. In the left navigation pane, choose **Roles**.

3. On the **Roles** page, choose **Create role**.

4. On the **Select trusted entity** page, do the following:

- a. In the **Trusted entity type** section, choose **Web identity**.

- b. For **Identity provider**, choose the **OpenID Connect provider URL** for your cluster (as shown under **Overview** in Amazon EKS).

- c. For **Audience**, choose `sts.amazonaws.com`.

- d. Choose **Next**.

5. On the **Add permissions page**, skip everything and choose **Next**.

6. On the **Name, review, and create** page, do the following:

- a. For **Role name**, enter a unique name for your role, such as ***AltinityRoleForEBSParamsController***.

- b. Under **Add tags (Optional)**, add metadata to the role by attaching tags as key–value pairs. For more information about using tags in IAM, see [Tagging IAM Entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html) in the _IAM User Guide_.

- c. Choose Create role.

7. After the role is created, choose the role in the console to open it for editing.

8. On the **Permissions** tab, choose **Add permissions**, and then choose **Create inline policy**.

9. Choose **JSON**, and replace the contents in the **Policy editor** with the following code:

10. Choose **Next**, then enter a unique policy name, such as ***AltinityEBSParamsControllerPolicy***.

11. Choose **Create policy**

12. Choose the **Trust relationships** tab, and then choose **Edit trust policy**.

13. Find the line that looks similar to the following line:

Add a comma to the end of the previous line, and then add the following line after the previous line. Replace `region-code` with the AWS Region that your cluster is in. Replace `EXAMPLE168660E7300CC5879EEXAMPLE` with your cluster's OIDC provider ID.

14. Choose **Update policy** to finish.

15. Copy the **ARN** value from the role's **Summary**.

**To deploy the EBS Params Controller**

1. Save the **Manifest** from https://github.com/Altinity/ebs-params-controller/blob/main/deployment.yaml

2. Replace the `${role_arn}` string with your role's **ARN**.

3. Apply the **Manifest**: