> For the complete documentation index, see [llms.txt](https://nebu.gitbook.io/nebu-knowledge-hub/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://nebu.gitbook.io/nebu-knowledge-hub/getting-started/cloud-read-only/aws.md).

# AWS

Follow these steps to create a Read-Only Access IAM user and attach the ReadOnlyAccess policy in AWS.

## Step 1: Create a New IAM User

Run the following command to create a new IAM user. Replace <**nebu-readonl*****y***> with your desired username:

{% code overflow="wrap" %}

```bash
aws iam create-user --user-name nebu-readonly
```

{% endcode %}

## Step 2: Attach the ReadOnlyAccess Policy to the User

The **ReadOnlyAccess** policy allows the user to view AWS resources but not modify them. Attach this policy using the following command:

{% code overflow="wrap" %}

```bash
aws iam attach-user-policy --user-name nebu-readonly --policy-arn arn:aws:iam::aws:policy/ReadOnlyAccess
```

{% endcode %}

## Step 3: Create an Access Key for the User

we need programmatic access, create an access key:

{% code overflow="wrap" %}

```bash
aws iam create-access-key --user-name nebu-readonly
```

{% endcode %}

## Final Step: Use Access Keys in NEBU Initialization

1. Enter the **Access Key ID** and **Secret Access Key** into NEBU’s initialization process.
2. NEBU will securely use this key to analyze your cloud configurations with **read-only permissions**.